I agree with the oft given advice on the list: it is often better to
avoid the distro's packaged OpenLDAP, and compile your own. However, I
would *strongly* recommend using /some/ package method (RPM, APT, Stow,
even ./configure --prefix=/some/isolated/location) when you compile your
own -- this will ease the upgrade pain, and make future deployments
easier. Plus, if your distro of choice does ever package a 'modern'
version (any distro packaging 2.2.17 yet??), it will be simpler to
migrate if you so choose.