see also
OpenLDAP + SSL
LDAP for Rocket Scientists