FWIW, nss_ldap should probably be modified to use the asynchronous LDAP search API, and to fetch the next result on each successive getXXent() rather than on the first. Making this change to ypldapd improved the perceived performance. -- Luke