Securing Open LDAP & SSL

[OpenLDAP <OpenLDAP@exchange.ware.net>]

Hi Folks,

I'm looking at an OpenLDAP solution for a client. We are considering
using LDAP
for centralized authentication services. Obviously this increases our
exposure
in terms of if the LDAP server gets cracked the hackers will far more
access
instantly than before. 

I'm looking for tips on securing the LDAP software, implementing SSL to
the 
servers that will utilize it, and other recommendations. I don't want to
start a general "securing unix" conversation however.

TIA,

Lance