(that should be after ldap_connect)