About a month ago I finished writing my "Seminarfacharbeit" about "Sicherere latenzarme Kommunikationswege mit IPsec" (Get it!).
Also sometime ago Fefe accepted my scan_ldapsearchfilterstring for tinyldap. It parses LDAP Search Filters. I guess there will be a more versatile ldapclient in tinyldap really soon. This will nearly eliminate the need for OpenLDAP's ldapsearch ;-).