LDAP authentication and shadowExpire