Currently, mongos supports LDAP authentication, but authorization occurs on the config servers. An LDAP authorization flag, 'ldapAuthzQueryTemplate' appears in mongos' help output, but doesn't have any purpose. It should be removed.

All options for binding are still necessary, as mongos may need to bind to the LDAP server to map user names to DNs, and may need to bind to query the RootDSE.