LDAP-enabled Mac OS X Command Line Client authentication methods

Simple

For Simple authentication, the login name, in the form of the retrieved DN, is sent with the password in clear text to the LDAP server.

Digest

This method requires a Digest plugin installed on the LDAP server with its own user database. The LDAP server internally forwards authentication credentials to the Digest plugin (SASLDB). There is no search mechanism for DN in this case.