it would be useful for a user accessing the LDAP server, he should not be allowed to change the LDAP server parameters.
not even have to see them, but access directly to the contact editing screen.
a couple of my clients managed (without wanting it) to change the basic parameters of the LDAP server and it did not work anymore.
Last thing, enter a contact search function in the contact editing screen