...

It returns whatever returned by sasl_getprop(); it should be a pointer to a zero-terminated string within the SASL context (you don't have to free it, but it may be invalidated when the context is destroyed).

It seems "you don't have to free it" was the clue! Well, it rather means you must not free it.

That's exactly what I meant :)

Ah, nice! web2ldap does not show anonymous anymore when binding to MS AD with SASL/GSSAPI. :-)

Any chance to get this into 2.4.18? Please... ;-)

I don't consider this a critical change, so I wouldn't object. Having said this, I wouldn't cry if 2.4.18 is ready and the maintainers do not want to re-package it just because of this fix :)

p.