Red Hat 8.1 - Manual (Page 192)

“Commonly-Used ldapsearch Options” .
Table 6.13. SASL Options
Option Description
-o Specifies SASL options. The format is -o
saslOption=value. saslOption can have one of six
values:
mech, the SASL authentication mechanism
authid, the user who is binding to the server
(Kerberos principal)
authzid, a proxy authorization (ignored by the
server since proxy authorization is not
supported)
secProp, the security properties
realm, the Kerberos realm
flags
The expected values depend on the supported
mechanism. The -o can be used multiple times to
pass all of the required SASL information for the
mechanism. For example:
-o "mech=DIGEST-MD5" -o
"authzid=test_user" -o
"authid=test_user"
See SASL Options for ldapsearch for information on how to use SASL options with ldapmodify.
Additional ldapmodify Options
192
Chapter 6. Command-Line Utilities