Authentication

I won't pretend I've tried it, but I would be surprised if either LDAP port was exposed onto the public internet without IP restrictions at the firewall end. Even with IP address restrictions on who can dial into it, that's a major security concern to my mind.