Hi,
a few days ago I committed the new kinit plugin to the CVS tree. It's sole purpose is to have slapd request a Kerberos TGT and keep it renewed as long as slapd is running. Especially useful e.g. if your syncrepl consumer uses SASL/GSSAPI for authentication (basically all setups where slapd also acts as an LDAP client can benefit from it). So there is no need any longer to use any external tools (cron jobs, whatever) to keep the TGT refreshed.
You can find the code in current CVS HEAD inside the contrib/slapd-modules/kinit directory. For details on building the plugin see the README file in the same directory. It should be possible to build the plugin against recent OpenLDAP releases. Currently it only works with the MIT variant of libkrb5, it shouldn't be too hard to add Heimdal support though. I just didn't find time yet to look into that.
Feedback is appreciated. For bug reports please use the ITS.