> Of the two, I suspect that nss-pam-ldapd is the more portable. I ported it several years ago and have been using it it production ever since. The PADL stuff has the problem you may be pulling in different openlap or openssl versions into your binary without noticing.