Move authzid_backend to after restrictions checks

diff --git a/servers/slapd/bind.c b/servers/slapd/bind.c
index 1e2fdbc36b88b77729439344795a2ca377f27f71..e825eeb850d6352af19e2a05341d2d45e7c6ba0a 100644 (file)
--- a/servers/slapd/bind.c
+++ b/servers/slapd/bind.c
@@ -338,8 +338,6 @@ do_bind(
                goto cleanup;
        }
 
-       conn->c_authz_backend = be;
-
        /* check restrictions */
        rc = backend_check_restrictions( be, conn, op, NULL, &text ) ;
        if( rc != LDAP_SUCCESS ) {
@@ -348,6 +346,8 @@ do_bind(
                goto cleanup;
        }
 
+       conn->c_authz_backend = be;
+
        if ( be->be_bind ) {
                int ret;
                /* alias suffix */