At 04:23 AM 11/3/2006, john d wrote: >Hi, > I like to know why the {KERBEROS} support in simple >bind is deprecated in Openldap? I believe there were numerous reasons. Architecturally, it simply makes sense to move the external password store access function outside of slapd(8) proper and into a small, standalone daemon, like saslauthd(8). With {SASL}, we have this. -- Kurt