Ensure exact DNs are normalized in slap_parseURI.

diff --git a/servers/slapd/saslauthz.c b/servers/slapd/saslauthz.c
index 6ff7f7d7688175efefd9745b0e0046adffe343e8..c3d92ac4ab6779adae2bf2e46eb66ee458d46e2e 100644 (file)
--- a/servers/slapd/saslauthz.c
+++ b/servers/slapd/saslauthz.c
@@ -136,9 +136,12 @@ is_dn_exact:       bv.bv_len = uri->bv_len - (bv.bv_val - uri->bv_val);
 
 is_dn:         bv.bv_len = uri->bv_len - (bv.bv_val - uri->bv_val);
 
-               ber_dupbv_x( nbase, &bv, op->o_tmpmemctx );
-               *scope = LDAP_X_SCOPE_EXACTREGEX;
-               return LDAP_SUCCESS;
+               rc = dnNormalize( 0, NULL, NULL, &bv, nbase, op->o_tmpmemctx );
+               if( rc == LDAP_SUCCESS ) {
+                       *scope = LDAP_X_SCOPE_EXACTREGEX;
+               }
+
+               return( rc );
 
        /* explicitly set to regex: it will be regcomp'd/regexec'd */
        } else if ( !strncasecmp( uri->bv_val, "dn.regex:", sizeof("dn.regex:")-1 ) ) {