I know this is an old question, but it doesn't look like it was ever answered, so for posterity's sake the answer is that 'setcap' needs to be applied to the Java binary.
setcap 'cap_net_bind_service=+ep' /usr/lib/jvm/jre-1.7.0-openjdk.x86_64/bin/java
That appears to have done the trick for me, and my ApacheDS is now running on the standard service ports.