I was using a service account, this can get locked during configuration and produces same result. But it was working, so it maybe how much time it takes which I've also seen. However, when ldap is working secure services are not accessible thru web adaptor. Even in an http or https environment in 10.2. This is broken in 10.2, and works in 10.1. But 10.2 supports a mixed private/secure environment using 2 web adaptors. Which is why I'm trying to upgrade.
I'm considering using the custom config using java. I had some success using the windows domain...