This decodes ok as

{SASL}username@realm

(omit the trailing ==, before decoding)

So you mean to delegate auth to a sasl realm called 'realm', containing a user called 'username' ?

Have you literally added this example value to an ldap entry and dumped it with slapcat ?

On 15/08/2012, at 10:22 PM, sergio mailbox@sergio.spb.ru wrote:

...

On 08/15/2012 06:12 PM, Emmanuel Lécharny wrote:

...

e1NBU0x9dXNlcm5hbWVAcmVhbG0K==

ONCE AGAIN:

This is my bad example. Real values in the database have no newline or some other non-ASCII non printable characters.

It even can't be correctly decoded.

-- sergio.