Best practices of OpenLDAP