exec-program dependent on ldap attribute values