Also my /etc/ldap.conf has:
host 192.168.1.0 192.168.1.1 base dc=com,dc=edu,dc=com ldap_version 3 binddn uid=authenticate,ou=System,dc=com,dc=edu,dc=com bindpw {MD5}jikxdsfdfsdfsdfsO5dIXw== rootbinddn cn=admin,dc=com,dc=edu,dc=com nss_initgroups_ignoreusers
People keep doing this! bindpw is the unencrypted password.