would like admin could modify attributes that simple user could not

The Data module in the LDAP Integration bundle will sync data between LDAP and Drupal users / Content Profiles, but it is done entirely in the background. Users cannot tell there is an LDAP database behind Drupal.

What you want to do is combine this module with a node permission module, such as CCK Private Fields. LDAP Integration would handle reading and writing fields between Drupal and LDAP, the CCK Private Fields would restrict who can see or modify the fields.