Yet more reading about LDAP and directory services...