override ldap reply attribute