ldapsearch cmdline question