To explore these options, check with the example ldap.conf that comes with the nss_ldap package. Make sure you have the CA certificate in /etc/ssl/certs, and run c_rehash.

We use MIT Kerberos V v1.4.1 and OpenLDAP v2.1.30 running on Gentoo Linux as our authentication and identity management systems, respectively. I assume you have three servers: kdc.example.com, ...

If your business needs an LDAP implementation, you can't go wrong with the OpenLDAP/phpLDAPadmin combo. Jack Wallen helps you get it up and running.