Okay, I've committed changes to -devel which should make ldap_get_kerberosv4_credentials() open the default connection if needed. As the new routine, ldap_open_defconn() is shared with ldap_open() and ldap_send_initial_request(), I was able to test it without Kerberos... hopefully I got the call in ldap_get_kerberosv4_credentials() right. Please test. Kurt