In certain circumstances (e.g., two successive localhost EXTERNAL
Just to be sure:
What do you mean with "localhost" in this context?
Really ldap://localhost or ldapi://?
SASL EXTERNAL most times only makes sense in the latter case (unless you've
configured a TLS certificate with name "localhost").