[DIRSERVER-867] Return populated supportedSASLMechanisms attribute

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.5.1
• Component/s: core
• Assignee: Alex Karasulu
• Reporter: Enrique Rodriguez
• Created: 07/Mar/07 00:01
• Updated: 15/Feb/09 14:06
• Resolved: 22/Mar/07 19:42

Description

Some LDAP clients will query the LDAP server for the attribute 'supportedSASLMechanisms'. ApacheDS currently doesn't return this attribute. Assuming all supported mechanisms are enabled in configuration, the server should return:

supportedSASLMechanisms: GSSAPI
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: CRAM-MD5

Here's an excerpt from RFC 4512:

5.1.7. 'supportedSASLMechanisms'

The 'supportedSASLMechanisms' attribute lists the SASL mechanisms
[RFC4422] that the server recognizes and/or supports [RFC4513]. The
contents of this attribute may depend on the current session state.
If the server does not support any SASL mechanisms, this attribute
will not be present.

( 1.3.6.1.4.1.1466.101.120.14 NAME 'supportedSASLMechanisms'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
USAGE dSAOperation )

The Directory String (1.3.6.1.4.1.1466.115.121.1.15) syntax is
defined in [RFC4517].