is there a trick to getting cfldap to use the CF's service logged in as account for the bind user? I'm not passing username/password but it's not working - are there jvm args i need to set or something like that? thanks!

Not possible, could just set something application.ldapuser etc and just pass that way?

well we want to use a gmsa account so we don't have to change the password every 30 days

yea would require some custom work to keep in sync with that automated gmsa; some custom code or api or something, honestly never dealt with something like that

yeah i can't figure it out - been trying some jvm flags for kerberos but nothing is working

I would bet not possible