ldap export: don't use password if not given