search for: ldap_service_password_fil

...c=somewhere,dc=com" # this object needs to have read rights on # the realm container and principal subtrees ldap_kadmind_dn = "cn=adm-service,dc=somewhere,dc=com" # this object needs to have read and write rights on # the realm container and principal subtrees ldap_service_password_file = /etc/krb5/service.keyfile ldap_servers = ldaps://machine1.somewhere.com ldaps://machine2.somewhere.com ldap_conns_per_server = 5 } in otherwords ldap uses krb5 for authentication (AND it took me ages to work out and test the krb5.conf and have ldap and cyrus and bind all working...