LDAP-enabled macOS X Command Line Client authentication methods
For Simple authentication, the login name, in the form of the retrieved DN, is sent with the password in clear text to the LDAP server.
This method requires a Digest plugin installed on the LDAP server with its own user database. The LDAP server internally forwards authentication credentials to the Digest plugin (SASLDB). There is no search mechanism for DN in this case.