The bind passwd is a String. Besides the implied UCS-2 -> UTF-8 conversion, I suspect there are password values which cannot be represented as a String. I believe byte[] would be more appropriate type as the associated protocol field is an octetString (and common attributes for password storage hold octetString values). Kurt