Niether pam_ldap nor pam_krb5 need be aware of how Active Directory stores passwords. You should be able to use either PAM module; I would suggest you use the latter. -- Luke -- Luke Howard | Darwin Developer | PADL Software Pty Ltd www.padl.com | lukeh@darwin.apple.com | lukeh@padl.com