extend LDAP search