Hans Leidekker (@hans) commented about libs/ldap/libldap/sasl_w.c:
if (status == SEC_I_CONTINUE_NEEDED) return SASL_CONTINUE; else {
if (((conn->flags & ISC_REQ_INTEGRITY) && !(attrs & ISC_RET_INTEGRITY)) ||
((conn->flags & ISC_REQ_CONFIDENTIALITY) && !(attrs & ISC_RET_CONFIDENTIALITY)))
ldap_log_printf( NULL, LDAP_DEBUG_TRACE, "sasl_client_step: server doesn't support some of the requested security levels\n" );
I don't see any evidence that this is needed.