ldap: Don't use the backend's display name as identifier