Kurt D. Zeilenga wrote:

At 08:06 PM 11/27/2006, hyc@symas.com wrote:

...

Kurt@OpenLDAP.org wrote:

...

At 07:51 PM 11/27/2006, Kurt D. Zeilenga wrote:

...

Spoke too soon. You code appears to be sending the same requests as Nessus, at least as described here: http://www.nessus.org/plugins/index.php?view=viewsrc&id=23625

Suspect a mismatch between what you and Brian are testing...

Howard, is the normalized authcDN in your testing correct?

It has a single escaped space.

And that's correct (I was wrong before). A directory string of N spaces normalizes to a single space, which must be escaped in the DN.

So it does seem like you and Brian are simply not running the same code.

The only difference between my current RE23 tree and 2.3.30 is in syncprov.c which is obviously not involved here. I would guess Brian's issue may be libsasl2 related, and no longer something resident in the OpenLDAP code. (E.g., conflicting libdb versions.)