Howard Chu wrote:SASL Binds do not use a DN in the Bind request, therefore you don't need the -D option (and anything you provide there is ignored by the server).
Hmm, since this issue is raised quite often how about handle this more clearly?
If -D is only appropriate for simple bind the command-line tools could check whether -D is used and then give a hint that -x is to be used. Or simply imply simple bind automagically. Same for -U. etc.
Maybe I'm missing something.
Good idea. No one ever suggested it before. Will you submit an ITS?
-- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/