an infamous LDAP-FreeRadius question