How to create role name from 2 different LDAP attributes