Re: ldap design