masarati@aero.polimi.it wrote:

...

masarati@aero.polimi.it wrote:

...

...

libldap should be capable of returning SASL username obtained with sasl_getprop( sasl_context, SASL_USERNAME, ... ) as result of ldap_get_option()

Added to HEAD (LDAP_OPT_X_SASL_USERNAME); please test. Thanks, p.

Does it simply return a string like LDAP_OPT_URI, LDAP_OPT_X_TLS_CACERTFILE etc.?

It returns whatever returned by sasl_getprop(); it should be a pointer to a zero-terminated string within the SASL context (you don't have to free it, but it may be invalidated when the context is destroyed).

It seems "you don't have to free it" was the clue! Well, it rather means you must not free it.

Ah, nice! web2ldap does not show anonymous anymore when binding to MS AD with SASL/GSSAPI. :-)

Any chance to get this into 2.4.18? Please... ;-)

Ciao, Michael.