detect mechs that are known to perform native authz

diff --git a/servers/slapd/back-ldap/config.c b/servers/slapd/back-ldap/config.c
index 806516053b28a45842d2f79cfd0c6f838aea72df..89408dc1ed8dae25510f7e8aaf330694dbaffd48 100644 (file)
--- a/servers/slapd/back-ldap/config.c
+++ b/servers/slapd/back-ldap/config.c
@@ -838,6 +838,13 @@ parse_idassert(
                                        }
                                        ber_str2bv( val, 0, 1, &li->idassert_sasl_mech );
 
+#ifdef LDAP_BACK_HOW_TO_DETECT_SASL_NATIVE_AUTHZ
+                                       /* mechs that are known to support native authz... */
+                                       if ( strcasecmp( li->idassert_sasl_mech.bv_val, "DIGEST-MD5" ) == 0 ) {
+                                               li->idassert_flags |= LDAP_BACK_AUTH_NATIVE_AUTHZ;
+                                       }
+#endif /* LDAP_BACK_HOW_TO_DETECT_SASL_NATIVE_AUTHZ */
+
                                } else if ( strncasecmp( argv[arg], "realm=", STRLENOF( "realm=" ) ) == 0 ) {
                                        char    *val = argv[arg] + STRLENOF( "realm=" );