I've only just started playing with kerberos and sasl. So I'm not 100% sure if this is normal behavior. My ldapsearch's work, but on the server, I need 3 bind attempts before actually binding successfully. The first 2 throw err=14 SASL bind in progress, then the third always works.