upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-22 07:39:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#5264 don't log NULL/anonymous DNs

Browse source
This commit is contained in:
Howard Chu 2007-12-22 21:16:54 +00:00
parent d38ff5403f
commit d88ab7bf36
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
servers/slapd/saslauthz.c
View file

@ -1665,7 +1665,7 @@ slap_sasl_match( Operation *opx, struct berval *rule,
Debug( LDAP_DEBUG_TRACE, Debug( LDAP_DEBUG_TRACE,
"===>slap_sasl_match: comparing DN %s to rule %s\n", "===>slap_sasl_match: comparing DN %s to rule %s\n",
assertDN->bv_val, rule->bv_val, 0 ); assertDN->bv_len ? assertDN->bv_val : "(null)", rule->bv_val, 0 );
/* NOTE: don't normalize rule if authz syntax is enabled */ /* NOTE: don't normalize rule if authz syntax is enabled */
rc = slap_parseURI( opx, rule, &base, &op.o_req_ndn, rc = slap_parseURI( opx, rule, &base, &op.o_req_ndn,
@ -2038,11 +2038,16 @@ int slap_sasl_authorized( Operation *op,
int rc = LDAP_INAPPROPRIATE_AUTH; int rc = LDAP_INAPPROPRIATE_AUTH;
/* User binding as anonymous */ /* User binding as anonymous */
if ( authzDN == NULL ) { if ( !authzDN || !authzDN->bv_len || !authzDN->bv_val ) {
rc = LDAP_SUCCESS; rc = LDAP_SUCCESS;
goto DONE; goto DONE;
} }
/* User is anonymous */
if ( !authcDN || !authcDN->bv_len || !authcDN->bv_val ) {
goto DONE;
}
Debug( LDAP_DEBUG_TRACE, Debug( LDAP_DEBUG_TRACE,
"==>slap_sasl_authorized: can %s become %s?\n", "==>slap_sasl_authorized: can %s become %s?\n",
authcDN->bv_len ? authcDN->bv_val : "(null)", authcDN->bv_len ? authcDN->bv_val : "(null)",