[Blind-sysadmins] LDAP/AD questions