SSL (port 636) is required and maybe you need to add cn=users to the base dn. Here’s a working config:
cn=users
Some time ago we were talking about LDAP and Thunderbird: