Re: ADSI and RFC 2251

[Mark Wahl <M.Wahl@INNOSOFT.COM>]

There is no CONTEXT PRIMITIVE 9 in the choice in the bind request defined
by any IETF document.  Some old code from this vendor used nonstandard
tags as there were no SASL framework defined for v2.  1777 defines 0, 1 and 2,
and 2251 defines constructed 3.  Since there is a SASL framework for v3, the
vendor MUST use an appropriate SASL mechanism.  Perhaps you are recieving a 
bind from a client that is thinking it is still in a v2 world? I recommend 
that your implementation should return a notice of disconnection and close the 
connection.

You can find more information on these nonstandard and noninteroperable LDAP 
Bind choices in the Microsoft Developer Network Library.  It will tell you
what they were intended for but not what the field contents are.

Mark Wahl, Directory Product Architect
Innosoft International, Inc.