I complicated things by mixing saslauthd and GSSAPI. I need to simplify and just focus on GSSAPI. I'll get rid of the regex mapping and just focus on getting authentication to work. I'll create a user like in the documentation (i.e. uid=kurt,cn=gssapi,cn=auth). I'm guessing I'll need a dn for cn=gssapi,cn=auth. Any hint as to what the objectClass would be?