r12687: Push the real list of supported GENSEC mechanisms out on

supportedSASLMechanism in the rootdse.  (Second half of a patch
commited earlier today).

Andrew Bartlett
(This used to be commit 4b67b5d688493c385e12734fd2c0c9dbc1b238e4)

1 files changed, 21 insertions, 0 deletions

diff --git a/source4/dsdb/samdb/ldb_modules/rootdse.c b/source4/dsdb/samdb/ldb_modules/rootdse.c
index a4211990383..93bc9903ed7 100644
--- a/source4/dsdb/samdb/ldb_modules/rootdse.c
+++ b/source4/dsdb/samdb/ldb_modules/rootdse.c
@@ -24,6 +24,7 @@
 #include "lib/ldb/include/ldb.h"
 #include "lib/ldb/include/ldb_errors.h"
 #include "lib/ldb/include/ldb_private.h"
+#include "auth/gensec/gensec.h"
 #include <time.h>
 
 /*
@@ -43,6 +44,7 @@ static int rootdse_add_dynamic(struct ldb_module *module, struct ldb_request *re
 {
 	struct ldb_search *s = &req->op.search;
 	struct ldb_message *msg;
+	struct cli_credentials *server_creds;
 
 	/* this is gross, and will be removed when I change ldb_result not
 	   to be so pointer crazy :-) */
@@ -61,6 +63,25 @@ static int rootdse_add_dynamic(struct ldb_module *module, struct ldb_request *re
 		}
 	}
 
+	server_creds = talloc_get_type(ldb_get_opaque(module->ldb, "server_credentials"), 
+				       struct cli_credentials);
+	if (do_attribute(s->attrs, "supportedSASLMechanisms")) {
+		const struct gensec_security_ops **ops = cli_credentials_gensec_list(server_creds);
+		int i;
+		for (i = 0; ops && ops[i]; i++) {
+			if (ops[i]->sasl_name) {
+				const char *sasl_name = talloc_strdup(msg, ops[i]->sasl_name);
+				if (!sasl_name) {
+					goto failed;
+				}
+				if (ldb_msg_add_string(msg, "supportedSASLMechanisms",
+						       sasl_name) != 0) {
+					goto failed;
+				}
+			}
+		}
+	}
+	
 	/* TODO: lots more dynamic attributes should be added here */
 
 	return 0;