LDAPS

Hi hackers,

I've run into a few requests for $SUBJECT in the field. I understand
that this is a bit controversial: LDAP + StartTLS (what we already
support) is better than LDAPS because it's a proper standard, and LDAP
auth in general is not as good as some other authentication methods
that we should be encouraging. I don't actually have a strong view on
whether we should support it myself, but I took a swing at it to see
if there would be any technical obstacles. I did not find any. That
said, I've only tested the attached lightly on FreeBSD + OpenLDAP and
don't know if it'll work elsewhere. Thoughts?

--
Thomas Munro
http://www.enterprisedb.com