ldap server: generate correct referral schemes