openldap+sasl confusion