tool:
http://code.google.com/p/ldap-blind-explorer/

video:
http://penetration-testing.7safe.com/the-art-of-exploiting-lesser-known-injection-flaws-revealed-at-black-hat/