I made some additional changes, mostly on the client side, to handle SASL final steps v. LDAP_SASL_BIND_IN_PROGRESS issues. Please test. Kurt