In setting up the mail server, we came across some other tools that we found helpful in testing and, later, administration.
GQ-0.4.0[5] is a general purpose LDAP schema and data browser. Just point it at your LDAP server and you can view and modify data as well as look at the schemas that are defined within.
GQ has a few password related bugs when using it with OpenLDAP. The big problem is that it doesn't encode userPasswords the way OpenLDAP expects them to be encoded. Also, it doesn't provide for salted SHA and salted MD5 passwords. There are, however, patches[6] that solve this problem.