With the modified server, GSS-SPNEGO does work between OpenLDAP client and server. Obviously, the behaviour or GSSAPI remains unchanged. We are still conducting interoperability testing with Windows 2000; it appears that the problems we're having are not at the SASL layer, though. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com