For running a production LDAP service, I near always recommend
building and maintaining it yourself.
I'm interested in the exceptions you have
in mind with "near always".
What do you think about building via ports on *BSD systems (pkgsrc on
AFAICT it generally produces a resonably up-to-date release (provided
an up-to-date port tree of course).