Any LDAP authentication routine typically contain two binds. The first bind should be as a service account (probably better not to use the directory-manager account) which does the search for the user's
For customizing the look of your lightweight component and making it look lucid like it was made of glass.
Or: how to make your component more Apple-ish ;)
This tip assumes your component to be of rectangular shape and completely opaque.