initial checkin of LDAP interface