diff --git a/.travis.yml b/.travis.yml
index 4dd7b6dc..5a4b33cf 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -6,7 +6,20 @@ rvm:
   - jruby-19mode
   - rbx-19mode
   # - rbx-2
+
+env:
+  - INTEGRATION=openldap
+
+install:
+  - if [ "$INTEGRATION" = "openldap" ]; then ./script/install-openldap; fi
+  - bundle install
+
+script: bundle exec rake
+
 matrix:
   allow_failures:
     - rvm: jruby-19mode
-script: bundle exec rake
+  fast_finish: true
+
+notifications:
+  email: false
diff --git a/script/install-openldap b/script/install-openldap
new file mode 100755
index 00000000..cd9491c1
--- /dev/null
+++ b/script/install-openldap
@@ -0,0 +1,44 @@
+#!/usr/bin/env sh
+set -e
+set -x
+
+BASE_PATH="$( cd `dirname $0`/../test/fixtures/openldap && pwd )"
+SEED_PATH="$( cd `dirname $0`/../test/fixtures          && pwd )"
+
+DEBIAN_FRONTEND=noninteractive sudo -E apt-get install -y --force-yes slapd time ldap-utils
+
+sudo /etc/init.d/slapd stop
+
+TMPDIR=$(mktemp -d)
+cd $TMPDIR
+
+# Delete data and reconfigure.
+sudo cp -v /var/lib/ldap/DB_CONFIG ./DB_CONFIG
+sudo rm -rf /etc/ldap/slapd.d/*
+sudo rm -rf /var/lib/ldap/*
+sudo cp -v ./DB_CONFIG /var/lib/ldap/DB_CONFIG
+sudo slapadd -F /etc/ldap/slapd.d -b "cn=config" -l $BASE_PATH/slapd.conf.ldif
+# Load memberof and ref-int overlays and configure them.
+sudo slapadd -F /etc/ldap/slapd.d -b "cn=config" -l $BASE_PATH/memberof.ldif
+
+# Add base domain.
+sudo slapadd -F /etc/ldap/slapd.d <<EOM
+dn: dc=rubyldap,dc=com
+objectClass: top
+objectClass: domain
+dc: rubyldap
+EOM
+
+sudo chown -R openldap.openldap /etc/ldap/slapd.d
+sudo chown -R openldap.openldap /var/lib/ldap
+
+sudo /etc/init.d/slapd start
+
+# Import seed data.
+# NOTE: use ldapadd in order for memberOf and refint to apply, instead of:
+# cat $SEED_PATH/seed.ldif | sudo slapadd -F /etc/ldap/slapd.d
+/usr/bin/time sudo ldapadd -x -D "cn=admin,dc=rubyldap,dc=com" -w passworD1 \
+             -h localhost -p 389 \
+             -f $SEED_PATH/seed.ldif
+
+sudo rm -rf $TMPDIR
diff --git a/test/fixtures/openldap/memberof.ldif b/test/fixtures/openldap/memberof.ldif
new file mode 100644
index 00000000..dac7c6b5
--- /dev/null
+++ b/test/fixtures/openldap/memberof.ldif
@@ -0,0 +1,33 @@
+dn: cn=module,cn=config
+cn: module
+objectClass: olcModuleList
+objectClass: top
+olcModulePath: /usr/lib/ldap
+olcModuleLoad: memberof.la
+
+dn: olcOverlay={0}memberof,olcDatabase={1}hdb,cn=config
+objectClass: olcConfig
+objectClass: olcMemberOf
+objectClass: olcOverlayConfig
+objectClass: top
+olcOverlay: memberof
+olcMemberOfDangling: ignore
+olcMemberOfRefInt: TRUE
+olcMemberOfGroupOC: groupOfNames
+olcMemberOfMemberAD: member
+olcMemberOfMemberOfAD: memberOf
+
+dn: cn=module,cn=config
+cn: module
+objectclass: olcModuleList
+objectclass: top
+olcmoduleload: refint.la
+olcmodulepath: /usr/lib/ldap
+
+dn: olcOverlay={1}refint,olcDatabase={1}hdb,cn=config
+objectClass: olcConfig
+objectClass: olcOverlayConfig
+objectClass: olcRefintConfig
+objectClass: top
+olcOverlay: {1}refint
+olcRefintAttribute: memberof member manager owner
diff --git a/test/fixtures/openldap/slapd.conf.ldif b/test/fixtures/openldap/slapd.conf.ldif
new file mode 100644
index 00000000..6ba5cf77
--- /dev/null
+++ b/test/fixtures/openldap/slapd.conf.ldif
@@ -0,0 +1,67 @@
+dn: cn=config
+objectClass: olcGlobal
+cn: config
+olcPidFile: /var/run/slapd/slapd.pid
+olcArgsFile: /var/run/slapd/slapd.args
+olcLogLevel: none
+olcToolThreads: 1
+
+dn: olcDatabase={-1}frontend,cn=config
+objectClass: olcDatabaseConfig
+objectClass: olcFrontendConfig
+olcDatabase: {-1}frontend
+olcSizeLimit: 500
+olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break
+olcAccess: {1}to dn.exact="" by * read
+olcAccess: {2}to dn.base="cn=Subschema" by * read
+
+dn: olcDatabase=config,cn=config
+objectClass: olcDatabaseConfig
+olcDatabase: config
+olcAccess: to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break
+
+dn: cn=schema,cn=config
+objectClass: olcSchemaConfig
+cn: schema
+
+include: file:///etc/ldap/schema/core.ldif
+include: file:///etc/ldap/schema/cosine.ldif
+include: file:///etc/ldap/schema/nis.ldif
+include: file:///etc/ldap/schema/inetorgperson.ldif
+
+dn: cn=module{0},cn=config
+objectClass: olcModuleList
+cn: module{0}
+olcModulePath: /usr/lib/ldap
+olcModuleLoad: back_hdb
+
+dn: olcBackend=hdb,cn=config
+objectClass: olcBackendConfig
+olcBackend: hdb
+
+dn: olcDatabase=hdb,cn=config
+objectClass: olcDatabaseConfig
+objectClass: olcHdbConfig
+olcDatabase: hdb
+olcDbCheckpoint: 512 30
+olcDbConfig: set_cachesize 1 0 0
+olcDbConfig: set_lk_max_objects 1500
+olcDbConfig: set_lk_max_locks 1500
+olcDbConfig: set_lk_max_lockers 1500
+olcLastMod: TRUE
+olcSuffix: dc=rubyldap,dc=com
+olcDbDirectory: /var/lib/ldap
+olcRootDN: cn=admin,dc=rubyldap,dc=com
+# admin's password: "passworD1"
+olcRootPW: {SHA}LFSkM9eegU6j3PeGG7UuHrT/KZM=
+olcDbIndex: objectClass eq
+olcAccess: to attrs=userPassword,shadowLastChange
+  by self write
+  by anonymous auth
+  by dn="cn=admin,dc=rubyldap,dc=com" write
+  by * none
+olcAccess: to dn.base="" by * read
+olcAccess: to *
+  by self write
+  by dn="cn=admin,dc=rubyldap,dc=com" write
+  by * read
diff --git a/test/fixtures/seed.ldif b/test/fixtures/seed.ldif
new file mode 100644
index 00000000..3ad3e293
--- /dev/null
+++ b/test/fixtures/seed.ldif
@@ -0,0 +1,374 @@
+dn: ou=People,dc=rubyldap,dc=com
+objectClass: top
+objectClass: organizationalUnit
+ou: People
+
+dn: ou=Groups,dc=rubyldap,dc=com
+objectClass: top
+objectClass: organizationalUnit
+ou: Groups
+
+# Directory Superuser
+dn: uid=admin,dc=rubyldap,dc=com
+uid: admin
+cn: system administrator
+sn: administrator
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+displayName: Directory Superuser
+userPassword: passworD1
+
+# Users 1-10
+
+dn: uid=user1,ou=People,dc=rubyldap,dc=com
+uid: user1
+cn: user1
+sn: user1
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user1@rubyldap.com
+
+dn: uid=user2,ou=People,dc=rubyldap,dc=com
+uid: user2
+cn: user2
+sn: user2
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user2@rubyldap.com
+
+dn: uid=user3,ou=People,dc=rubyldap,dc=com
+uid: user3
+cn: user3
+sn: user3
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user3@rubyldap.com
+
+dn: uid=user4,ou=People,dc=rubyldap,dc=com
+uid: user4
+cn: user4
+sn: user4
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user4@rubyldap.com
+
+dn: uid=user5,ou=People,dc=rubyldap,dc=com
+uid: user5
+cn: user5
+sn: user5
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user5@rubyldap.com
+
+dn: uid=user6,ou=People,dc=rubyldap,dc=com
+uid: user6
+cn: user6
+sn: user6
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user6@rubyldap.com
+
+dn: uid=user7,ou=People,dc=rubyldap,dc=com
+uid: user7
+cn: user7
+sn: user7
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user7@rubyldap.com
+
+dn: uid=user8,ou=People,dc=rubyldap,dc=com
+uid: user8
+cn: user8
+sn: user8
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user8@rubyldap.com
+
+dn: uid=user9,ou=People,dc=rubyldap,dc=com
+uid: user9
+cn: user9
+sn: user9
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user9@rubyldap.com
+
+dn: uid=user10,ou=People,dc=rubyldap,dc=com
+uid: user10
+cn: user10
+sn: user10
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: user10@rubyldap.com
+
+# Emailless User
+
+dn: uid=emailless-user1,ou=People,dc=rubyldap,dc=com
+uid: emailless-user1
+cn: emailless-user1
+sn: emailless-user1
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+
+# Groupless User
+
+dn: uid=groupless-user1,ou=People,dc=rubyldap,dc=com
+uid: groupless-user1
+cn: groupless-user1
+sn: groupless-user1
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+
+# Admin User
+
+dn: uid=admin1,ou=People,dc=rubyldap,dc=com
+uid: admin1
+cn: admin1
+sn: admin1
+objectClass: top
+objectClass: person
+objectClass: organizationalPerson
+objectClass: inetOrgPerson
+userPassword: passworD1
+mail: admin1@rubyldap.com
+
+# Groups
+
+dn: cn=ghe-users,ou=Groups,dc=rubyldap,dc=com
+cn: ghe-users
+objectClass: groupOfNames
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=emailless-user1,ou=People,dc=rubyldap,dc=com
+
+dn: cn=all-users,ou=Groups,dc=rubyldap,dc=com
+cn: all-users
+objectClass: groupOfNames
+member: cn=ghe-users,ou=Groups,dc=rubyldap,dc=com
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=user2,ou=People,dc=rubyldap,dc=com
+member: uid=user3,ou=People,dc=rubyldap,dc=com
+member: uid=user4,ou=People,dc=rubyldap,dc=com
+member: uid=user5,ou=People,dc=rubyldap,dc=com
+member: uid=user6,ou=People,dc=rubyldap,dc=com
+member: uid=user7,ou=People,dc=rubyldap,dc=com
+member: uid=user8,ou=People,dc=rubyldap,dc=com
+member: uid=user9,ou=People,dc=rubyldap,dc=com
+member: uid=user10,ou=People,dc=rubyldap,dc=com
+member: uid=emailless-user1,ou=People,dc=rubyldap,dc=com
+
+dn: cn=ghe-admins,ou=Groups,dc=rubyldap,dc=com
+cn: ghe-admins
+objectClass: groupOfNames
+member: uid=admin1,ou=People,dc=rubyldap,dc=com
+
+dn: cn=all-admins,ou=Groups,dc=rubyldap,dc=com
+cn: all-admins
+objectClass: groupOfNames
+member: cn=ghe-admins,ou=Groups,dc=rubyldap,dc=com
+member: uid=admin1,ou=People,dc=rubyldap,dc=com
+
+dn: cn=n-member-group10,ou=Groups,dc=rubyldap,dc=com
+cn: n-member-group10
+objectClass: groupOfNames
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=user2,ou=People,dc=rubyldap,dc=com
+member: uid=user3,ou=People,dc=rubyldap,dc=com
+member: uid=user4,ou=People,dc=rubyldap,dc=com
+member: uid=user5,ou=People,dc=rubyldap,dc=com
+member: uid=user6,ou=People,dc=rubyldap,dc=com
+member: uid=user7,ou=People,dc=rubyldap,dc=com
+member: uid=user8,ou=People,dc=rubyldap,dc=com
+member: uid=user9,ou=People,dc=rubyldap,dc=com
+member: uid=user10,ou=People,dc=rubyldap,dc=com
+
+dn: cn=nested-group1,ou=Groups,dc=rubyldap,dc=com
+cn: nested-group1
+objectClass: groupOfNames
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=user2,ou=People,dc=rubyldap,dc=com
+member: uid=user3,ou=People,dc=rubyldap,dc=com
+member: uid=user4,ou=People,dc=rubyldap,dc=com
+member: uid=user5,ou=People,dc=rubyldap,dc=com
+
+dn: cn=nested-group2,ou=Groups,dc=rubyldap,dc=com
+cn: nested-group2
+objectClass: groupOfNames
+member: uid=user6,ou=People,dc=rubyldap,dc=com
+member: uid=user7,ou=People,dc=rubyldap,dc=com
+member: uid=user8,ou=People,dc=rubyldap,dc=com
+member: uid=user9,ou=People,dc=rubyldap,dc=com
+member: uid=user10,ou=People,dc=rubyldap,dc=com
+
+dn: cn=nested-groups,ou=Groups,dc=rubyldap,dc=com
+cn: nested-groups
+objectClass: groupOfNames
+member: cn=nested-group1,ou=Groups,dc=rubyldap,dc=com
+member: cn=nested-group2,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-member-nested-group1,ou=Groups,dc=rubyldap,dc=com
+cn: n-member-nested-group1
+objectClass: groupOfNames
+member: cn=nested-group1,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=deeply-nested-group0.0.0,ou=Groups,dc=rubyldap,dc=com
+cn: deeply-nested-group0.0.0
+objectClass: groupOfNames
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=user2,ou=People,dc=rubyldap,dc=com
+member: uid=user3,ou=People,dc=rubyldap,dc=com
+member: uid=user4,ou=People,dc=rubyldap,dc=com
+member: uid=user5,ou=People,dc=rubyldap,dc=com
+
+dn: cn=deeply-nested-group0.0.1,ou=Groups,dc=rubyldap,dc=com
+cn: deeply-nested-group0.0.1
+objectClass: groupOfNames
+member: uid=user6,ou=People,dc=rubyldap,dc=com
+member: uid=user7,ou=People,dc=rubyldap,dc=com
+member: uid=user8,ou=People,dc=rubyldap,dc=com
+member: uid=user9,ou=People,dc=rubyldap,dc=com
+member: uid=user10,ou=People,dc=rubyldap,dc=com
+
+dn: cn=deeply-nested-group0.0,ou=Groups,dc=rubyldap,dc=com
+cn: deeply-nested-group0.0
+objectClass: groupOfNames
+member: cn=deeply-nested-group0.0.0,ou=Groups,dc=rubyldap,dc=com
+member: cn=deeply-nested-group0.0.1,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=deeply-nested-group0,ou=Groups,dc=rubyldap,dc=com
+cn: deeply-nested-group0
+objectClass: groupOfNames
+member: cn=deeply-nested-group0.0,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=deeply-nested-groups,ou=Groups,dc=rubyldap,dc=com
+cn: deeply-nested-groups
+objectClass: groupOfNames
+member: cn=deeply-nested-group0,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group1,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group1
+objectClass: groupOfNames
+member: cn=nested-group1,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group2,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group2
+objectClass: groupOfNames
+member: cn=n-depth-nested-group1,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group3,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group3
+objectClass: groupOfNames
+member: cn=n-depth-nested-group2,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group4,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group4
+objectClass: groupOfNames
+member: cn=n-depth-nested-group3,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group5,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group5
+objectClass: groupOfNames
+member: cn=n-depth-nested-group4,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group6,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group6
+objectClass: groupOfNames
+member: cn=n-depth-nested-group5,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group7,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group7
+objectClass: groupOfNames
+member: cn=n-depth-nested-group6,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group8,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group8
+objectClass: groupOfNames
+member: cn=n-depth-nested-group7,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=n-depth-nested-group9,ou=Groups,dc=rubyldap,dc=com
+cn: n-depth-nested-group9
+objectClass: groupOfNames
+member: cn=n-depth-nested-group8,ou=Groups,dc=rubyldap,dc=com
+
+dn: cn=head-group,ou=Groups,dc=rubyldap,dc=com
+cn: head-group
+objectClass: groupOfNames
+member: cn=tail-group,ou=Groups,dc=rubyldap,dc=com
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=user2,ou=People,dc=rubyldap,dc=com
+member: uid=user3,ou=People,dc=rubyldap,dc=com
+member: uid=user4,ou=People,dc=rubyldap,dc=com
+member: uid=user5,ou=People,dc=rubyldap,dc=com
+
+dn: cn=tail-group,ou=Groups,dc=rubyldap,dc=com
+cn: tail-group
+objectClass: groupOfNames
+member: cn=head-group,ou=Groups,dc=rubyldap,dc=com
+member: uid=user6,ou=People,dc=rubyldap,dc=com
+member: uid=user7,ou=People,dc=rubyldap,dc=com
+member: uid=user8,ou=People,dc=rubyldap,dc=com
+member: uid=user9,ou=People,dc=rubyldap,dc=com
+member: uid=user10,ou=People,dc=rubyldap,dc=com
+
+dn: cn=recursively-nested-groups,ou=Groups,dc=rubyldap,dc=com
+cn: recursively-nested-groups
+objectClass: groupOfNames
+member: cn=head-group,ou=Groups,dc=rubyldap,dc=com
+member: cn=tail-group,ou=Groups,dc=rubyldap,dc=com
+
+# posixGroup
+
+dn: cn=posix-group1,ou=Groups,dc=rubyldap,dc=com
+cn: posix-group1
+objectClass: posixGroup
+gidNumber: 1001
+memberUid: user1
+memberUid: user2
+memberUid: user3
+memberUid: user4
+memberUid: user5
+
+# missing members
+
+dn: cn=missing-users,ou=Groups,dc=rubyldap,dc=com
+cn: missing-users
+objectClass: groupOfNames
+member: uid=user1,ou=People,dc=rubyldap,dc=com
+member: uid=user2,ou=People,dc=rubyldap,dc=com
+member: uid=nonexistent-user,ou=People,dc=rubyldap,dc=com
diff --git a/test/integration/test_bind.rb b/test/integration/test_bind.rb
new file mode 100644
index 00000000..5ec1b63f
--- /dev/null
+++ b/test/integration/test_bind.rb
@@ -0,0 +1,22 @@
+require_relative '../test_helper'
+
+class TestBindIntegration < LDAPIntegrationTestCase
+  def test_bind_success
+    assert @ldap.bind(method: :simple, username: "uid=user1,ou=People,dc=rubyldap,dc=com", password: "passworD1"), @ldap.get_operation_result.inspect
+  end
+
+  def test_bind_anonymous_fail
+    refute @ldap.bind(method: :simple, username: "uid=user1,ou=People,dc=rubyldap,dc=com", password: ""), @ldap.get_operation_result.inspect
+
+    result = @ldap.get_operation_result
+    assert_equal 53, result.code
+    assert_equal "Unwilling to perform", result.message
+    assert_equal "unauthenticated bind (DN with no password) disallowed",
+      result.error_message
+    assert_equal "", result.matched_dn
+  end
+
+  def test_bind_fail
+    refute @ldap.bind(method: :simple, username: "uid=user1,ou=People,dc=rubyldap,dc=com", password: "not my password"), @ldap.get_operation_result.inspect
+  end
+end
diff --git a/test/integration/test_search.rb b/test/integration/test_search.rb
new file mode 100644
index 00000000..77eea8c4
--- /dev/null
+++ b/test/integration/test_search.rb
@@ -0,0 +1,27 @@
+require_relative '../test_helper'
+
+class TestSearchIntegration < LDAPIntegrationTestCase
+  def test_search
+    entries = []
+
+    result = @ldap.search(filter: "(uid=user1)", base: "dc=rubyldap,dc=com") do |entry|
+      assert_kind_of Net::LDAP::Entry, entry
+      entries << entry
+    end
+
+    refute entries.empty?
+    assert_equal entries, result
+  end
+
+  def test_search_without_result
+    entries = []
+
+    result = @ldap.search(filter: "(uid=user1)", base: "dc=rubyldap,dc=com", return_result: false) do |entry|
+      assert_kind_of Net::LDAP::Entry, entry
+      entries << entry
+    end
+
+    assert result
+    refute_equal entries, result
+  end
+end
diff --git a/test/support/vm/openldap/.gitignore b/test/support/vm/openldap/.gitignore
new file mode 100644
index 00000000..dace7081
--- /dev/null
+++ b/test/support/vm/openldap/.gitignore
@@ -0,0 +1 @@
+/.vagrant
diff --git a/test/support/vm/openldap/README.md b/test/support/vm/openldap/README.md
new file mode 100644
index 00000000..a2769567
--- /dev/null
+++ b/test/support/vm/openldap/README.md
@@ -0,0 +1,32 @@
+# Local OpenLDAP Integration Testing
+
+Set up a [Vagrant](http://www.vagrantup.com/) VM to run integration tests against OpenLDAP locally.
+
+To run integration tests locally:
+
+``` bash
+# start VM (from the correct directory)
+$ cd test/support/vm/openldap/
+$ vagrant up
+
+# get the IP address of the VM
+$ ip=$(vagrant ssh -- "ifconfig eth1 | grep -o -E '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' | head -n1")
+
+# change back to root project directory
+$ cd ../../../..
+
+# run all tests, including integration tests
+$ time INTEGRATION=openldap INTEGRATION_HOST=$ip bundle exec rake
+
+# run a specific integration test file
+$ time INTEGRATION=openldap INTEGRATION_HOST=$ip bundle exec ruby test/integration/test_search.rb
+
+# run integration tests by default
+$ export INTEGRATION=openldap
+$ export INTEGRATION_HOST=$ip
+
+# now run tests without having to set ENV variables
+$ time bundle exec rake
+```
+
+You may need to `gem install vagrant` first in order to provision the VM.
diff --git a/test/support/vm/openldap/Vagrantfile b/test/support/vm/openldap/Vagrantfile
new file mode 100644
index 00000000..0aaa4feb
--- /dev/null
+++ b/test/support/vm/openldap/Vagrantfile
@@ -0,0 +1,33 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# Vagrantfile API/syntax version. Don't touch unless you know what you're doing!
+VAGRANTFILE_API_VERSION = "2"
+
+Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
+  config.vm.hostname = "freeipa.ghe.local"
+
+  config.vm.box = "hashicorp/precise64"
+
+  config.vm.network "private_network", type: :dhcp
+
+  config.ssh.forward_agent = true
+
+  config.vm.provision "shell", inline: "apt-get update; exec env /vagrant_data/script/install-openldap"
+
+  config.vm.synced_folder "../../../..", "/vagrant_data"
+
+  config.vm.provider "vmware_fusion" do |vb, override|
+    override.vm.box = "hashicorp/precise64"
+    vb.memory = 4596
+    vb.vmx["displayname"] = "integration tests vm"
+    vb.vmx["numvcpus"] = "2"
+  end
+
+  config.vm.provider "virtualbox" do |vb, override|
+    vb.memory = 4096
+    vb.customize ["modifyvm", :id, "--nicpromisc2", "allow-all"]
+    vb.customize ["modifyvm", :id, "--chipset", "ich9"]
+    vb.customize ["modifyvm", :id, "--vram", "16"]
+  end
+end
diff --git a/test/test_helper.rb b/test/test_helper.rb
index b25aea7c..f208977d 100644
--- a/test/test_helper.rb
+++ b/test/test_helper.rb
@@ -3,6 +3,9 @@
 require 'net/ldap'
 require 'flexmock/test_unit'
 
+# Whether integration tests should be run.
+INTEGRATION = ENV.fetch("INTEGRATION", "skip") != "skip"
+
 if RUBY_VERSION < "2.0"
   class String
     def b
@@ -28,3 +31,24 @@ def subscribe(event)
     @events[event]
   end
 end
+
+class LDAPIntegrationTestCase < Test::Unit::TestCase
+  # If integration tests aren't enabled, noop these tests.
+  if !INTEGRATION
+    def run(*)
+      self
+    end
+  end
+
+  def setup
+    @service = MockInstrumentationService.new
+    @ldap = Net::LDAP.new \
+      host:           ENV.fetch('INTEGRATION_HOST', 'localhost'),
+      port:           389,
+      admin_user:     'uid=admin,dc=rubyldap,dc=com',
+      admin_password: 'passworD1',
+      search_domains: %w(dc=rubyldap,dc=com),
+      uid:            'uid',
+      instrumentation_service: @service
+  end
+end