import empty DN in proxyAuthz control fix from HEAD

diff --git a/CHANGES b/CHANGES
index 394cfd5e1370177d3299b094c59a8fe68e97a402..e2b56870bdfb8f389765075944fadb04decd2bb7 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,7 @@
 OpenLDAP 2.2 Change Log
 
 OpenLDAP 2.2.12 Engineering
+       Fixed slapd empty DN in proxyAuthx control
        Fixed slapd parsing of auth{cz} "dn:<pat>" rules
        Fixed slapd set acl recursion (ITS#3140)
        Fixed slapd first component bug (ITS#3118)

diff --git a/servers/slapd/controls.c b/servers/slapd/controls.c
index 6ad3dc8c955f8e1d68f72272955ec17734cb8e11..4a7be65abf1ac91aff19348ab138060a4c897a46 100644 (file)
--- a/servers/slapd/controls.c
+++ b/servers/slapd/controls.c
@@ -766,7 +766,7 @@ static int parseProxyAuthz (
                        ctrl->ldctl_value.bv_val, ctrl->ldctl_value.bv_len,
                        NULL, &dn, SLAP_GETDN_AUTHZID );
 
-       if( rc != LDAP_SUCCESS || !dn.bv_len ) {
+       if( rc != LDAP_SUCCESS ) {
                if ( dn.bv_val ) {
                        ch_free( dn.bv_val );
                }