KERBEROS+SASL+OPENLDAP : login but no ticket

[jeremy.briffaut@gmail.com]

Yes, It's the first solution that I have tried.
login->pam_krb5->kerberos + ldap for account

And I would to test the login->pam_ldap->openldap->SASL->kerberos just
for fun :)
with this way, all client can connect to the server with ldap (no need
of kerberos). Kerberos client can supplementary have a ticket. But I
don't know if this is possible with just ldap in pam.
But kerb and next ldap in pam works.