Doing authentication with LDAP is hard, mainly because the information you need is scattered through a whole set of documents, and some important details are not covered at all.

As a result, I spent a week of hard work figuring out how to do it.