At 03:37 AM 3/31/2006, François Beretti wrote: >Is it possible to do a SASL bind (for example: EXTERNAL with TLS or >GSSAPI with Kerberos) while no user is mapped to the SASL >authentication identity ? There is no general requirement that the authentication identity refer to a directory entry. -- Kurt