Multi-Hop SSH Tunnel for LDAP

Question

I'm trying to browse an LDAP server which is hidden inside our VPN. The topology looks like this:

me (at home)
|
VPN gateway (at work)
|
Application Server (server1)
|
LDAP server (server2)

I can connect from home through to server1 using SSH, and server1 can connect to server2 via LDAP (on port 389). So my question is: how can I forward that LDAP connection from server2 back to my local PC, in order to use something like Apache Directory Studio to browse the LDAP structure on my home PC?

Answer 1

Unless server2 has a tunneling facility of its own, it can't play any part in this. Can't you connect directly to LDAP via SSH?