mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-21 07:09:34 -05:00
Fix test045, test048 use acl-bind credentials on retry if they were set.
This commit is contained in:
parent
e2f4ca480d
commit
ca262ee8e6
1 changed files with 3 additions and 2 deletions
|
|
@ -995,8 +995,8 @@ retry_lock:;
|
||||||
* but the "override" flag is given to idassert.
|
* but the "override" flag is given to idassert.
|
||||||
* It allows to use SASL bind and yet proxyAuthz users
|
* It allows to use SASL bind and yet proxyAuthz users
|
||||||
*/
|
*/
|
||||||
if ( op->o_conn != NULL &&
|
if ( op->o_conn != NULL && !op->o_do_not_cache &&
|
||||||
!op->o_do_not_cache &&
|
( !LDAP_BACK_CONN_ISPRIV( lc ) || BER_BVISEMPTY( &lc->lc_bound_ndn )) &&
|
||||||
( !isbound || ( li->li_idassert_flags & LDAP_BACK_AUTH_OVERRIDE ) ) )
|
( !isbound || ( li->li_idassert_flags & LDAP_BACK_AUTH_OVERRIDE ) ) )
|
||||||
{
|
{
|
||||||
(void)ldap_back_proxy_authz_bind( lc, op, rs, sendok );
|
(void)ldap_back_proxy_authz_bind( lc, op, rs, sendok );
|
||||||
|
|
@ -1427,6 +1427,7 @@ ldap_back_retry( ldapconn_t **lcp, Operation *op, SlapReply *rs, ldap_back_send_
|
||||||
if ( rc == 0 && *lcp != NULL ) {
|
if ( rc == 0 && *lcp != NULL ) {
|
||||||
/* freeit, because lc_refcnt == 1 */
|
/* freeit, because lc_refcnt == 1 */
|
||||||
(*lcp)->lc_refcnt = 0;
|
(*lcp)->lc_refcnt = 0;
|
||||||
|
LDAP_BACK_CONN_TAINTED_SET( *lcp );
|
||||||
(void)ldap_back_freeconn( op, *lcp, 0 );
|
(void)ldap_back_freeconn( op, *lcp, 0 );
|
||||||
*lcp = NULL;
|
*lcp = NULL;
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue