testing how extension attribs work under ad/ldap