Apropros of nothing, who the hell thought Connectionless LDAP was a good idea? Let's have LDAP, but allow it to be used in reflection attacks...