I believe there are some errors in these instructions - specifically, TLSCertificateFile is set to /etc/openldap/ssl/slapd-cert.pem; however, the openssl command has -out = slapd-cert.crt. Also, depending on your distribution and how you start ldap, the permissions and/or ownership of the slapd-cert.crt may need to change. »