ldap.attrmap question