fix group/role check (should address ITS#4106)

diff --git a/servers/slapd/aci.c b/servers/slapd/aci.c
index a77a9fb3ceefedb1667701975ef8556f5f6ac143..7f23b4363b3cc89f2d71d9636b5ae244efe0cef7 100644 (file)
--- a/servers/slapd/aci.c
+++ b/servers/slapd/aci.c
@@ -1487,6 +1487,7 @@ OpenLDAPaciPrettyNormal(
                                bv.bv_len = ntype.bv_len;
 
                                ocbv.bv_val++;
+                               ocbv.bv_len = type.bv_len - ( ocbv.bv_val - type.bv_val );
 
                                atbv.bv_val = strchr( ocbv.bv_val, '/' );
                                if ( atbv.bv_val != NULL