Can we please focus on the details? It's fine to use GSSAPI plugin as a reference (that was my suggestion originally) but it's not evident that changes are needed in libldap. We've gone from Unix libldap/sasl/gssapi to PE libldap/sspi/kerberos/Unix gssapi. We need to consider all parts that changed, not just libldap. Do you agree?