Stick unlang wrapper around the call to ldap

ie

if(request from VPN){
ldap
}

alan