Yea, I have cyrus-sasl in my ldap server (due to be released rsn, so you may still beat me to it :-) I have also thought about the ldap-backend-to-hdb idea (a backend I believe is the right abstraction) and would be interested in working on that. I guess one might start by figuring out what the schema looks like. Cheers Leif