That's something my co-worker will have to answer as he knows a whole lot more about LDAP than I do.  I'll ask him to answer this when he gets back into the office.