OpenLDAP woes