Try reading this first. I had a lot of trouble with LDAP (on Windows AD), but this discussion helped.