Source: https://www.oracle.com/technetwork/middleware/bi-foundation/epm-hss-openldapssl-whitepaper-9311-133421.pdf