Once in a while fiddling with the icinga ldap backend for the global user management leads into severe pain with web based ldap interfaces. Marius did show me the Apache Directory Studio which is kind of sweet and easy to use.
http://directory.apache.org/studio/download/download-linux.html
(available for Mac and Windows as well)
Create a new connection and then have fun moving users around, editing groups, etc
