Re: ldap profile (no full dn in profile attribute)