From: Pierangelo Masarati <ando@openldap.org>
Date: Thu, 13 May 2004 22:12:46 +0000 (+0000)
Subject: complete idassert options
X-Git-Tag: OPENDLAP_REL_ENG_2_2_MP~379
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=3b38676dd3837d99a92af0d339bf1739150f062c;p=openldap

complete idassert options
---

diff --git a/servers/slapd/back-ldap/config.c b/servers/slapd/back-ldap/config.c
index 0a2df2379d..d7cc0b2b14 100644
--- a/servers/slapd/back-ldap/config.c
+++ b/servers/slapd/back-ldap/config.c
@@ -687,8 +687,12 @@ parse_idassert(
 			return 1;
 		}
 
-		if ( strcasecmp( argv[1], "self" ) == 0 ) {
-			/* will proxyAuthz as (rewritten) client's identity */
+		if ( strcasecmp( argv[1], "none" ) == 0 ) {
+			/* will proxyAuthz as client's identity only if bound */
+			li->idassert_mode = LDAP_BACK_IDASSERT_NONE;
+
+		} else if ( strcasecmp( argv[1], "self" ) == 0 ) {
+			/* will proxyAuthz as client's identity */
 			li->idassert_mode = LDAP_BACK_IDASSERT_SELF;
 
 		} else if ( strcasecmp( argv[1], "anonymous" ) == 0 ) {