separate root and user dn in ldap export