(ITS#7403) back-ldap idassert always overrides

[hyc@OpenLDAP.org]

Full_Name: Howard Chu
Version: RE24/master
OS: 
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (37.19.96.255)
Submitted by: hyc


If an idassert-bind directive has been configured, idassert processing is always
performed, even if a direct bind has occurred. In effect, back-ldap always
behaves as if flags=override was set in the idassert configuration. This is not
the documented or intended behavior. A fix is coming shortly.