upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-10 00:45:01 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix ITS#4760 differently

Browse source
This commit is contained in:
Pierangelo Masarati 2006-11-24 13:02:26 +00:00
parent de254abb27
commit 0981516abf
2 changed files with 6 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
servers/slapd/controls.c
View file

@ -991,14 +991,6 @@ static int parseProxyAuthz (
op->o_ndn = dn;
ber_dupbv( &op->o_dn, &dn );
/*
* since the authzid has changed, we need to delete
* cached groups (ITS#4760)
*/
if ( op->o_groups ) {
slap_op_groups_free( op );
}
Statslog( LDAP_DEBUG_STATS, "%s PROXYAUTHZ dn=\"%s\"\n",
op->o_log_prefix, dn.bv_val, 0, 0, 0 );

8
servers/slapd/saslauthz.c
View file

@ -1882,14 +1882,18 @@ slap_sasl_check_authz( Operation *op,
AttributeDescription *ad,
struct berval *authc )
{
int rc;
BerVarray vals = NULL;
int rc,
do_not_cache = op->o_do_not_cache;
BerVarray vals = NULL;
Debug( LDAP_DEBUG_TRACE,
"==>slap_sasl_check_authz: does %s match %s rule in %s?\n",
assertDN->bv_val, ad->ad_cname.bv_val, searchDN->bv_val);
/* ITS#4760: don't cache group access */
op->o_do_not_cache = 1;
rc = backend_attribute( op, NULL, searchDN, ad, &vals, ACL_AUTH );
op->o_do_not_cache = do_not_cache;
if( rc != LDAP_SUCCESS ) goto COMPLETE;
/* Check if the *assertDN matches any *vals */