My next step in setting up LDAP is automating most of this by creating an .deb for it.

In particular, I need to get libldap with ssl and kpasswd support as well as a few extra schemas and the setup particular to everybody.org hosts.