william.b.clay@acm.org wrote:

In certain circumstances (e.g., two successive localhost EXTERNAL binds

Just to be sure:

What do you mean with "localhost" in this context?

Really ldap://localhost or ldapi://?

SASL EXTERNAL most times only makes sense in the latter case (unless you've configured a TLS certificate with name "localhost").

Ciao, Michael.