returning an arbitrary attribute from LDAP