hmm, so you add the username to the DN for the add call...? i don't get LDAP