use a recent openldap, make buildout work