Allow dn.base=""

diff --git a/servers/slapd/aclparse.c b/servers/slapd/aclparse.c
index e54db75c96fcafa01b09bd354974ba74876a7653..a7df30bd8e71c844aa9e9e27501ced2d6d536221 100644 (file)
--- a/servers/slapd/aclparse.c
+++ b/servers/slapd/aclparse.c
@@ -136,9 +136,9 @@ parse_acl(
                                split( argv[i], '=', &left, &right );
                                split( left, '.', &left, &style );
 
-                               if ( right == NULL || *right == '\0' ) {
+                               if ( right == NULL ) {
                                        fprintf( stderr,
-       "%s: line %d: missing \"=\" in (or value after) \"%s\" in to clause\n",
+       "%s: line %d: missing \"=\" in \"%s\" in to clause\n",
                                            fname, lineno, left );
                                        acl_usage();
                                }

diff --git a/tests/data/slapd-acl.conf b/tests/data/slapd-acl.conf
index 8a95c099fcf6b8daf19266be748d63a904f25e13..af31ce95e83b510e066dd3db5c501e3751ae695a 100644 (file)
--- a/tests/data/slapd-acl.conf
+++ b/tests/data/slapd-acl.conf
@@ -10,6 +10,10 @@ schemacheck  off
 pidfile     ./test-db/slapd.pid
 argsfile    ./test-db/slapd.args
 
+# global ACLs
+access to dn.base="" attr=objectClass by users read
+access to * by * read
+
 #######################################################################
 # ldbm database definitions
 #######################################################################
@@ -50,4 +54,4 @@ access                to filter="objectclass=groupofnames"
                by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
                by * break
 
-access         to * by * read
+# fall into global ACLs