query the server for mechanisms if not supplied by the caller.

Replace term "producer" with "provider".  "Provider" has a very specific meaning when it comes to replication.

Actually, slapd has supported sasl_setpass for many years...

and proxies them to a remote server.

Note in manual that res parameter should be freed regardless of return value
of ldap_search_ext_s (or friends).