Do not cache group evaluation if result is SLAP_CB_CONTINUE

diff --git a/servers/slapd/slapi/slapi_overlay.c b/servers/slapd/slapi/slapi_overlay.c
index 51b7bdc0d5be30d55b1485b7c857078ae135adb1..1df2b0f427af26f9f7eabf231dc14dc1f025aafa 100644 (file)
--- a/servers/slapd/slapi/slapi_overlay.c
+++ b/servers/slapd/slapi/slapi_overlay.c
@@ -950,7 +950,8 @@ slapi_over_acl_group(
                rc = LDAP_NO_SUCH_OBJECT; /* return SLAP_CB_CONTINUE for correctness? */
        }
 
-       if ( op->o_tag != LDAP_REQ_BIND && !op->o_do_not_cache ) {
+       if ( op->o_tag != LDAP_REQ_BIND && !op->o_do_not_cache &&
+            rc != SLAP_CB_CONTINUE ) {
                g = op->o_tmpalloc( sizeof( GroupAssertion ) + gr_ndn->bv_len,
                        op->o_tmpmemctx );
                g->ga_be = op->o_bd;