Thank you for the response! No, no... these are example data that I put together to understand how Google users are structured and the issue that uppercase letters are causing me. In the Google LDAP audit, I see that the user fails and appears in lowercase.

Once again, I apologize; I ran so many tests that I accidentally copied one where the binddn was incorrect.

The target looks more like this:

## example.com
uri             "ldaps://ldap.google.com/dc=proxy"
suffixmassage   "dc=proxy" "dc=example,dc=com"
lastmod  off
readonly on
idassert-bind   bindmethod=simple
                        binddn="cn=ChiwewDaw"
                        credentials="password-fake"
                        tls_reqcert=demand
                        tls_reqsan=demand
                        starttls=critical
                        tls_cert=/root/ldapcerts/ldap_cert.crt
                        tls_key=/root/ldapcerts/ldap_cert.key
                        tls_cacert=/root/ldapcerts/ca/gtsr1.pem

if i use:

idassert-bind   bindmethod=sasl
                        saslmech=EXTERNAL
                        tls_reqcert=demand
                        tls_reqsan=demand
                        starttls=critical

i have the error : "Unauthenticated"