This should be 'sasl-regexp' ... > sl-regexp > uid=(.*),cn=gssapi,cn=auth > ldap:///dc=team,dc=com??sub?(krb5PrincipalName=$1@REALM) Is the first line a typo in your note or in your slapd.conf? Cheers, Kent Soper "You don't stop playing because you grow old ... you grow old because you stop playing." Linux Technology Center, Linux Security phone: 1-512-838-9216 e-mail: dksoper@us.ibm.com