Is the ppolicy control supported by the command-line tools if SASL is used?
It seems I would have to use ldap_sasl_interactive_bind() like done in ./servers/slapd/back-ldap/bind.c:1448
Sorry, my fault: I was looking at HEAD code, where the client tool uses ldap_sasl_interactive_bind() exactly in that way. In any case, that's exactly what needs to be done: recursively call ldap_sasl_interactive_bind() and ldap_result(), and extract the control response from the last result.
p.