Thanks Don and Oscar (in private email) for explaining to me the relationship of the items I posted to Oscar's current efforts. In brief, it seems that there are issues with all of these things that make them less than ideal in one way or another, ranging from lack of availability of the code to needing to do surgery on AOLserver.
(Though I was wondering: how bad would it be to extend the AOLserver Tcl interpreter in order to incorporate, say, a Tcl LDAP module or some other feature that might only be available in straight Tcl?)
Anyway, I'm glad to hear that Oscar had checked all this stuff out before going to the trouble of writing his new module, which fulfills a need that apparently wasn't fulfilled before.