Authentication using AD : bug ?