OpenLDAP to Kerberos, Take 2