ITS#4587 fix for uniquemember/NameAndOptionalUID syntax

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index 886bc745fc6f0c10e46cd3360713b13cbefdffd7..080a43b3579a208c3a8c6c16c7687368f0e26640 100644 (file)
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -1649,7 +1649,8 @@ slap_acl_mask(
                        ACL_RECORD_VALUE_STATE;
 
                        /* must have DN syntax */
-                       if ( desc->ad_type->sat_syntax != slap_schema.si_syn_distinguishedName ) continue;
+                       if ( desc->ad_type->sat_syntax != slap_schema.si_syn_distinguishedName &&
+                               !is_at_syntax( desc->ad_type, SLAPD_NAMEUID_SYNTAX )) continue;
 
                        /* check if the target is an attribute. */
                        if ( val == NULL ) continue;