ldap validation