ldap authentication flow