Please see BUG #3196 (Build samba with Solaris ldap library).

Proposed patch for Samba-3.0.21b. Add some features:

 * Allow SSL support when build with Solaris ldap library
 * Remove smb.conf parameter 'ldap timeout' 
 * New smb.conf parameter 'ldap operation timeout'.
   It replace old parameter 'ldap timeout' and also used for set up
   LDAP_OPT_TIMELIMIT.
 * New smb.conf parameter 'ldap connection timeout'. 
   Used for set up LDAP_X_OPT_CONNECT_TIMEOUT.

Tested with Solaris 9/04 + Sun One Directory Server 5.2.

Quck howto for Solaris ldap library ssl client:

# cd /usr/local/etc/samba
# certutil -N -d .
# certutil -A -n "MTS Komi Ca" -t "CT,," -d . -a -i ca.crt
# certutil -L -d .

Certificate Name                                             Trust Attributes

MTS Komi Ca                                                  CT,,

p    Valid peer
P    Trusted peer (implies p)
c    Valid CA
T    Trusted CA to issue client certs (implies c)
C    Trusted CA to certs(only server certs for ssl) (implies c)
u    User cert
w    Send warning

# ./testparm -v|grep ldap
...
Server role: ROLE_DOMAIN_PDC
...
        passdb backend = "ldapsam:ldaps://sandra.komi.mts.ru simona.komi.mts.ru"
        ldap admin dn = cn=samba,dc=komi,dc=mts,dc=ru
        ldap cert db = /usr/local/etc/samba/cert7.db
        ldap suffix = dc=komi,dc=nw,dc=mts,dc=ru
        ldap connection timeout = 1
        ldap operation timeout = 15

Hint for passdb backend:
 * for OpenLDAP library:
 passdb backend = "ldapsam:ldaps://server1 ldaps://server2"

 * for Solaris library:
 passdb backend = "ldapsam:ldaps://server1 server2"

# ./pdbedit -d 3 -v tiamat
lp_load: refreshing parameters
Initialising global parameters
params.c:pm_process() - Processing configuration file "/usr/local/etc/samba/smb.conf"
Processing section "[global]"
Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=KOMI))]
Successfully setup ldapssl session with sandra.komi.mts.ru simona.komi.mts.ru:636
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=KOMI))]
Successfully setup ldapssl session with sandra.komi.mts.ru simona.komi.mts.ru:636
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
init_sam_from_ldap: Entry found for user: tiamat
Unix username:        tiamat
NT username:          tiamat
Account Flags:        [U          ]
User SID:             S-1-5-21-1234567890-1234567890-1234567890-4008
Primary Group SID:    S-1-5-21-1234567890-1234567890-1234567890-513
Full Name:            Дейтер Александр Валериевич
Home Directory:
HomeDir Drive:
Logon Script:
Profile Path:
Domain:               KOMI
Account desc:         Ведущий специалист
Workstations:
Munged dial:
Logon time:           0
Logoff time:          Sun, 04 Dec 0468 18:30:07 MSK
Kickoff time:         Sun, 04 Dec 0468 18:30:07 MSK
Password last set:    Mon, 12 Dec 2005 09:01:54 MSK
Password can change:  Mon, 12 Dec 2005 09:01:54 MSK
Password must change: Mon, 06 Mar 2006 09:01:54 MSK
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Directory server access log:
[12/Feb/2006:16:38:50 +0300] conn=2022 op=-1 msgId=-1 - fd=42 slot=42 LDAPS connection from 10.50.1.4 to 10.50.1.7
[12/Feb/2006:16:38:50 +0300] conn=2022 op=-1 msgId=-1 - SSL 128-bit RC4
[12/Feb/2006:16:38:50 +0300] conn=2022 op=0 msgId=1 - BIND dn="cn=samba,dc=komi,dc=mts,dc=ru" method=128 version=3

Thanks s lot!