use same password for LDAP and Kerberos stash