Thanks for all your error reports, I didn't forget it. I'll cleanup my guide soon. Thanks again!

OpenLDAP

ldapsearch -x -L -H ldaps://ldap.site:636/ uid=foo    # check if ldap works

/etc/ldap/ldap.conf

BASE            dc=site,dc=domain
URI             ldap://ldap.site.domain
TLS_REQCERT     allow

Discussion