Anyway, here at least is what I have done to get Ogo and Ldap working together:

Figure out what else you plan to use LDAP for

There really is no point using LDAP unless you plan (either now or later) to use it to integrate Ogo authentication with other services. Integrating Ogo logins with Email/Shell accounts, or Ogo logins with other web-based apps, or even with the new Samba 3 would probably give you the most value, so you might want to figure out what you need to get that stuff going while you are at it.

There are plenty of LDAP resources on the net : eg http://yolinux.com/TUTORIALS/LinuxTutorialLDAP.html#LDAPAUTH If you use Debian this wiki is worth its weight in gold : http://wiki.debian.net/index.cgi?LDAPAuthentication

Setup OpenLDAP

There are various howtos/docs for how to do this. Google is your friend.

Get a graphical LDAP Client

Download the LDAP Editor/Browser : its a graphical LDAP browser/editor (its Java based, so make sure your Java works first) and although I love the command-line as much as the next Linux geek, sometimes you really need to see what you are doing : at least this means that while learning to use LDAP you won't need to also learn how to operate your LDAP client (if you really know what you are doing of course, the command-line tools shipped with OpenLDAP will work fine too)

Add users to LDAP

Add some people. Ogo seems to use something like the fairly standard InetOrgPerson schema (or somesuch thing : I don't think Ogo obsesses over schemas: so long as there is a userPassword, Ogo seems to handle it). But since the whole point of LDAP is integration, what schema you use depends on what else your integrating with.

FYI: this works for me (try editing it and importing it as LDIF (then changing the password) using eg the LDAP browser/editor above) and it integrates with Unix accounts, which lots of other stuff also integrates with :

        dn: uid=user,ou=People,o=YourOrganisation,dc=yourdomain,dc=com
        objectClass: inetOrgPerson
        objectClass: posixAccount
        objectClass: shadowAccount
        uid: user
        givenName: Some Random
        sn: User
        loginShell: /bin/bash
        uidNumber: 1001
        gidNumber: 100
        mail: user@yourdomain.com
        homeDirectory: /home/randomuser
        userPassword: aa0y959N2nSV6
        cn: Some Random User

NB: Ogo seems able to populate some of the account properties from LDAP: eg it seems to find the email above : I wonder what other properties it can get from LDAP??

NNB: its a good idea to either to create an LDAP record for "root" (and then NOT use that as the system's root user): or even better to change the uid of "root" before switching over to LDAP to that of one of your ordinary users. Otherwise you won't be able to log in as the administrator.

Set the appropriate Ogo defaults

Put the Following in NSGlobalDomain :

                LSAuthLDAPServer = ldap1.yourdomain.com;
                LSAuthLDAPServerRoot="ou=People,o=YourOrganisation,dc=yourdomain,dc=com";

Restart ogo, and log in using your LDAP users and passwords!