I am testing SASL/EXTERNAL on ldapi:// and I ran into an issue with the following sasl-regexp expansion. sasl-regexp uidNumber=(.*)\\+gidNumber=(.*),cn=peercred,cn=EXTERNAL,cn=auth ldap:///o=example.com??sub?(&(uidNumber=$1)(gidNumber=$2)) ldap:///... will not expand because of acl. openldap seems want anonymous access to uidNumber and gidNumber. I only want authenticated access to DIT. Any ideas? Thanks, -- Igor