TDI load_photos_from_ldap.bat is not importing photos from Domino LDAP

It had been a while(several years) since I was last asked to import profile pictures from a Domino NAB into Connections . The process & technology has not been changed since years and I felt pretty confident to deliver a solution very soon to my customer. But this was a BIG deception which started a long journey....

For testing purposes I imported a binary image into a custom LDAP field into my Domino NAB.
*This was mandatory in the past: RichtTextField with images are not binary images for LDAP clients and you needed a third party tool like "ldapadmin" to import images correctly. Since Domino V11 the NAB already contains a very handy binary-photo-field for this:

Taking a look into to the documentation the chapter only covers 2 steps:

1. Open profiles_tdi.properties, locate the load_photos_from_ldap_attr_name property, and set it to the name of the LDAP binary attribute that contains the photo.
2. Run the load_photos_from_ldap command...

As you may have already guessed: This did not work. It will just iterate over all profiles and do nothing.

So I create a case and HCL came to the conclusion that you manually need to populate a return list of the TDI process ("ldapReturnAttributes"). The workaround is described in KB0092095