Added an explicit cn=wheel line to the group.
Add some ldap.conf settings for client side.
Still a draft. Added many notes and caveats.