For non-sasl binds, specify '-x' on your command line, which does make use of BINDDN.yes, that works fine. Maybe it should be made clearer in the manpage, that BINDDN does not apply (?) when not using simple authentication?
Feel free to submit an ITS with the appropriate changes. Likely the BINDDN section should say something more than just "when performing ldap operations" as it doesn't note the limitation to simple binds.
--Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration A division of Synacor, Inc