check out OpenLDAP's Fortress application. It provides an open source fully compliant RBAC API:
OpenLDAP, OpenLDAP Fortress