May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)