LDAP over SSL: a question

[Stephen Langasek <vorlon@netexpress.net>]

I'm looking at using LDAP for authenticating users on an internal network at
an ISP (all Linux hosts).  An open source solution is a must; however, it
appears that the existing free LDAP servers don't support SSL, which is also
a must.  Would using SSL tunnelling software between the clients and the
server be an option, or does LDAP over SSL have special requirements which
make it infeasible to use a non-integrated solution?

Also, the OpenLDAP roadmap says SSL support is planned for the 3rd quarter
of 99, but we're past the 2nd quarter already, and 1.3 doesn't seem to be
out.  :)  Is this timeline out-of-date?  Would it be possible to get some
idea of an expected release date for this?  Migrating to LDAP isn't yet a
pressing issue for us, but if SSL/TLS support is expected to take a long
time, I might persuade my employer to let me work on the project.  (Of
course, there'd be export issues to be worked around then...)

Cheers,
-Steve Langasek
postmodern programmer