saslAuthzTo/From LDUP URLs should have hostnames

diff --git a/servers/slapd/saslauthz.c b/servers/slapd/saslauthz.c
index b3f5ff9ca32a81dae05d3e37644fdcf19b762bac..601d0245c8481102d6792be533e960c3f3d9ca06 100644 (file)
--- a/servers/slapd/saslauthz.c
+++ b/servers/slapd/saslauthz.c
@@ -125,7 +125,10 @@ is_dn:             bv.bv_len = uri->bv_len - (bv.bv_val - uri->bv_val);
                return( LDAP_PROTOCOL_ERROR );
        }
 
-       /* could check the hostname here */
+       if ( ludp->lud_host && *ludp->lud_host ) {
+               /* host part should be empty */
+               return( LDAP_PROTOCOL_ERROR );
+       }
 
        /* Grab the scope */
        *scope = ludp->lud_scope;