Hmmm, I'm not crazy about introducing LDAP as a dependency, especially since it binds to a C API.