For running a production LDAP service, I near always recommend building and maintaining it yourself.
I'm interested in the exceptions you have in mind with "near always".What do you think about building via ports on *BSD systems (pkgsrc on NetBSD) ? AFAICT it generally produces a resonably up-to-date release (provided you have
an up-to-date port tree of course). Best regards, Thierry