Topic on Extension talk:LDAP Authentication

When "you" (whomever wrote the docs) states that "straight bind" is used for openldap/non-AD, I presume this means SASL rather than a simple bind right?

What SASL mechanisms are supported? I presume GSSAPI for Kerberos, but what about the non end-to-end mechs like PLAIN, LOGIN, CRAM-MD5 or even any of the new high-crypto mechs?

This is important to know to configure one's sasl subsystems correctly.

Many thanks.

Query server /?supportedSASLMechanisms?base?(objectclass=*) before bind to retrieve a list of supported mechanisms.