LDAP: advanced user attributes mapping