when creating a golden/silver ticket there is an option to use /ldap with /creduser and /credpassword to retrieve the relevant information regarding the ticket using ldap protocol. This option needs the cleartext password of /creduser. It would be great to have an option similar like /credhash to use the /creduser hash for ldap authentication instead of the cleartext password