The popularity of LDAP is increasing and is thus resulting in it's rapidly replacing NIS, Radius and tacacs and other authentication services. Unfortunately, as will most new technologies, many site are failing to instigate proper security measures when deploying this new technology. Common errors and assumptions will me discussed as well as techniques used by network intruders to compromise LDAP servers and related systems and harvest data.