What benefit is there in using the LDAP distribution point for an offline CA versus using only HTTP? It sounds like the process would be much simpler to use the HTTP distribution point only. I've spent quite a bit of time researching this issue with no definitive answer.
EDIT - I have a heterogeneous environment. The way I understand it I will need to have the distribution point available via HTTP for unauthenticated access from my embedded devices and Linux clients. That being the case what is the advantage to adding the CRL to AD as well?