Mapping LDAP attributes to CAS attributes