in the <what> clause of ACLs, only 'attr=' or 'attrs=' are allowed; the former for...

diff --git a/servers/slapd/aclparse.c b/servers/slapd/aclparse.c
index 0bb8461e0be7d2bd36cc86090547b517a8ce4f8e..0d2695fb037b768184d49c296f49029716e1b700 100644 (file)
--- a/servers/slapd/aclparse.c
+++ b/servers/slapd/aclparse.c
@@ -246,7 +246,8 @@ parse_acl(
                                                acl_usage();
                                        }
 
-                               } else if ( strncasecmp( left, "attr", 4 ) == 0 ) {
+                               } else if ( strcasecmp( left, "attr" ) == 0
+                                               || strcasecmp( left, "attrs" ) == 0 ) {
                                        a->acl_attrs = str2anlist( a->acl_attrs,
                                                right, "," );
                                        if ( a->acl_attrs == NULL ) {