Source: https://people.apache.org/~elecharny/ldapcon/Andrew%20Findlay-paper.pdf