OpenLDAP config + directory rationalization (/bin shell scripts likely do NOT work)