how to make user iteration work (with active directory ldap)