I am starting work on a community directory, the software for which is called Domesday. The back end data store will use an LDAP directory, but our desire to offer complete control over data privacy means we are doing some fairly complicated things with it, particularly with the access controls. We are probably going to have to rewrite them dynamically on the fly.
Also, it has been said of LDAP that “never has so much been written so incomprehensibly about a single topic” (with the possible exception of BIND). I’m starting to get my head around it, but it’s hard work.
So if anyone in the Mozilla community has LDAP schema/ACL design experience and would like to help out, that would be awesome :-) Get in touch.