Problem with reaching LDAP via IPSEC

[warpil]

Existing 2 LAN - LAN1 and LAN2. While LAN1 - 192.168.0.0/24 , LAN2 is 10.50.0.0/24 and connectivity to LAN2 happens through IPSEC tunnel with BINAT (all LAN1 masqueraded under 1 public IP)

As i understand - connectivity to LDAP occurs from localhost.
So my pFsense box can't reach LDAP server located in LAN2.
I've tried to make manual NAT rule for ipsec where all outgoing traffic from 127.0.0.0/8 forwarded to LAN2 and nated under public IP .. but not sure if i made this right…
Log says only following: php: /system_usermanager_settings_ldapacpicker.php: ERROR! ldap_get_user_ous() could not bind anonymously to server .

There is no authentication on LDAP (anonymous logon allowed) and i able to connect to LDAP through ldap browser from PC in LAN1.

How i may force pFsense to understand where to connect?

[warpil]

Debug patch gave following output:
dap_bind_s
ldap_simple_bind_s
ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP 10.20.0.100:389
ldap_new_socket: 15
ldap_prepare_socket: 15
ldap_connect_to_host: Trying 10.20.0.100:389
ldap_pvt_connect: fd: 15 tm: -1 async: 0
attempting to connect:
connect errno: 65
ldap_close_socket: 15
ldap_err2string