import cleanup ITS#4781 enhancement from HEAD

diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c
index 83c12237f30366dedb8b0e5ee3799439ce5c8266..2fb5f27488a270ff44b886c8c3200a4c4243cca7 100644 (file)
--- a/servers/slapd/back-ldap/bind.c
+++ b/servers/slapd/back-ldap/bind.c
@@ -1876,7 +1876,10 @@ ldap_back_is_proxy_authz( Operation *op, SlapReply *rs, ldap_back_send_t sendok,
 
        default:
                /* NOTE: rootdn can always idassert */
-               if ( BER_BVISNULL( &ndn ) && li->li_idassert_authz == NULL ) {
+               if ( BER_BVISNULL( &ndn )
+                       && li->li_idassert_authz == NULL
+                       && !( li->li_idassert_flags & LDAP_BACK_AUTH_AUTHZ_ALL ) )
+               {
                        if ( li->li_idassert_flags & LDAP_BACK_AUTH_PRESCRIPTIVE ) {
                                rs->sr_err = LDAP_INAPPROPRIATE_AUTH;
                                if ( sendok & LDAP_BACK_SENDERR ) {