# anonymous bind to determine user DN
$msg = $ldap->bind();
$msg = $ldap->search ( 
                       base => $BASE,
                       filter => "(uid=$uid)"
                     );

die "no entries" if ! $msg->count;

my $entry = $msg->shift_entry;
my $dn = $entry->dn;

$msg = $ldap->bind( $dn, password => $secret );