>NTLM is already supported, and I actually do intend to link to Cyrus >SASL when available, or locally implement CRAM-MD5 (it is a 'mandetory >to implement' part of the LDAPv3 spec). CRAM-MD5 is not mandatory to implement, see RFC 2829. -- Luke --