complete idassert options

diff --git a/servers/slapd/back-ldap/config.c b/servers/slapd/back-ldap/config.c
index 0a2df2379d7d66f9030c331f395b9b453678abaf..d7cc0b2b1464788d89a3c791636259632f0a36a2 100644 (file)
--- a/servers/slapd/back-ldap/config.c
+++ b/servers/slapd/back-ldap/config.c
@@ -687,8 +687,12 @@ parse_idassert(
                        return 1;
                }
 
-               if ( strcasecmp( argv[1], "self" ) == 0 ) {
-                       /* will proxyAuthz as (rewritten) client's identity */
+               if ( strcasecmp( argv[1], "none" ) == 0 ) {
+                       /* will proxyAuthz as client's identity only if bound */
+                       li->idassert_mode = LDAP_BACK_IDASSERT_NONE;
+
+               } else if ( strcasecmp( argv[1], "self" ) == 0 ) {
+                       /* will proxyAuthz as client's identity */
                        li->idassert_mode = LDAP_BACK_IDASSERT_SELF;
 
                } else if ( strcasecmp( argv[1], "anonymous" ) == 0 ) {