ldap credential caching