The main reason not to use sasldb is that we don't provide many administration tools -- so users changing their password requires additional software.
However, this isn't advocating using ldap. The main reason for using ldap is because it is already there. If you don't already have ldap up, I'd suggest you use Kerberos. Walter
