mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-25 09:09:54 -05:00
Fix ITS#2234 canonicalization bug
This commit is contained in:
parent
854e447231
commit
88adbc8691
1 changed files with 5 additions and 1 deletions
|
|
@ -656,8 +656,12 @@ slap_sasl_canonicalize(
|
|||
* the authcID temporarily in conn->c_sasl_dn. We necessarily
|
||||
* finish Canonicalizing before Authorizing, so there is no
|
||||
* conflict with slap_sasl_authorize's use of this temp var.
|
||||
*
|
||||
* The SASL EXTERNAL mech is backwards from all the other mechs,
|
||||
* it does authzID before the authcID. If we see that authzID
|
||||
* has already been done, don't do anything special with authcID.
|
||||
*/
|
||||
if ( flags == SASL_CU_AUTHID ) {
|
||||
if ( flags == SASL_CU_AUTHID && !auxvals[PROP_AUTHZ].values ) {
|
||||
conn->c_sasl_dn.bv_val = (char *) in;
|
||||
} else if ( flags == SASL_CU_AUTHZID && conn->c_sasl_dn.bv_val ) {
|
||||
rc = strcmp( in, conn->c_sasl_dn.bv_val );
|
||||
|
|
|
|||
Loading…
Reference in a new issue