> Care to share the ACL you're using? I've tried both of these: In the global section (before any "database" lines), first access line: access to dn.exact="" attrs=supportedSASLMechanisms by * none