---

   ldap_set_option    ( 3 )

---

Параметры SASL (SASL options)

The SASL options are OpenLDAP specific.

LDAP_OPT_X_SASL_AUTHCID Gets the SASL authentication identity; outvalue must be a char **, its content needs to be freed by the caller using ldap_memfree(3).

LDAP_OPT_X_SASL_AUTHZID Gets the SASL authorization identity; outvalue must be a char **, its content needs to be freed by the caller using ldap_memfree(3).

LDAP_OPT_X_SASL_MAXBUFSIZE Gets/sets SASL maximum buffer size; invalue must be const ber_len_t *, while outvalue must be ber_len_t *. See also LDAP_OPT_X_SASL_SECPROPS.

LDAP_OPT_X_SASL_MECH Gets the SASL mechanism; outvalue must be a char **, its content needs to be freed by the caller using ldap_memfree(3).

LDAP_OPT_X_SASL_MECHLIST Gets the list of the available mechanisms, in form of a NULL-terminated array of strings; outvalue must be char ***. The caller must not free or otherwise muck with it.

LDAP_OPT_X_SASL_NOCANON Sets/gets the NOCANON flag. When unset, the hostname is canonicalized. invalue must be const int *; its value should either be LDAP_OPT_OFF or LDAP_OPT_ON. outvalue must be int *.

LDAP_OPT_X_SASL_REALM Gets the SASL realm; outvalue must be a char **, its content needs to be freed by the caller using ldap_memfree(3).

LDAP_OPT_X_SASL_SECPROPS Sets the SASL secprops; invalue must be a char *, containing a comma-separated list of properties. Legal values are: none, nodict, noplain, noactive, passcred, forwardsec, noanonymous, minssf=<minssf>, maxssf=<maxssf>, maxbufsize=<maxbufsize>.

LDAP_OPT_X_SASL_SSF Gets the SASL SSF; outvalue must be a ber_len_t *.

LDAP_OPT_X_SASL_SSF_EXTERNAL Sets the SASL SSF value related to an authentication performed using an EXTERNAL mechanism; invalue must be a const ber_len_t *.

LDAP_OPT_X_SASL_SSF_MAX Gets/sets SASL maximum SSF; invalue must be const ber_len_t *, while outvalue must be ber_len_t *. See also LDAP_OPT_X_SASL_SECPROPS.

LDAP_OPT_X_SASL_SSF_MIN Gets/sets SASL minimum SSF; invalue must be const ber_len_t *, while outvalue must be ber_len_t *. See also LDAP_OPT_X_SASL_SECPROPS.

LDAP_OPT_X_SASL_USERNAME Gets the SASL username; outvalue must be a char **. Its content needs to be freed by the caller using ldap_memfree(3). LDAP_OPT_X_SASL_CBINDING Sets/gets the channel-binding type to use in SASL, one of LDAP_OPT_X_SASL_CBINDING_NONE (the default), LDAP_OPT_X_SASL_CBINDING_TLS_UNIQUE the "tls-unique" type from RFC 5929. LDAP_OPT_X_SASL_CBINDING_TLS_ENDPOINT the "tls-server-end-point" from RFC 5929, compatible with Windows. invalue must be const int *; outvalue must be int *.