The ldap module is needed to run the unit tests for tl-ldap-certalias without mocking the entire module. It looks like we're missing at least openldap-devel and cyrus-sasl-devel to build python-ldap.