>One more point - the SASL/PLAIN mechanism will use PAM if available. As such, >there's no need to explicitly build PAM support into OpenLDAP. But can you direct simple LDAP binds to SASL/PLAIN? -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com