fix ITS#3396 (filter in URI replacement must be present)

diff --git a/servers/slapd/saslauthz.c b/servers/slapd/saslauthz.c
index 081b196a2878f490fa615508f0bb8026974dc597..561ffa62195be235b6f087c4d4119b64cd3c4ef3 100644 (file)
--- a/servers/slapd/saslauthz.c
+++ b/servers/slapd/saslauthz.c
@@ -1145,7 +1145,13 @@ void slap_sasl2dn( Operation *opx,
                "slap_sasl2dn: performing internal search (base=%s, scope=%d)\n",
                op.o_req_ndn.bv_val, op.ors_scope, 0 );
 
-       if(( op.o_bd == NULL ) || ( op.o_bd->be_search == NULL)) {
+       if ( ( op.o_bd == NULL ) || ( op.o_bd->be_search == NULL) ) {
+               goto FINISHED;
+       }
+
+       /* Must run an internal search. */
+       if ( op.ors_filter == NULL ) {
+               rc = LDAP_FILTER_ERROR;
                goto FINISHED;
        }