disallow bind_simple_unprotected requires ssf > 1

diff --git a/servers/slapd/bind.c b/servers/slapd/bind.c
index 646b72f657ceec50b444242951c51e4818898a6e..1129fa6f43793cff77935abd925be92935440582 100644 (file)
--- a/servers/slapd/bind.c
+++ b/servers/slapd/bind.c
@@ -419,7 +419,7 @@ do_bind(
                        goto cleanup;
 
                } else if (( global_disallows & SLAP_DISALLOW_BIND_SIMPLE_UNPROTECTED )
-                       && ( op->o_ssf < global_ssf_set.sss_ssf ))
+                       && ( op->o_ssf <= 1 ))
                {
                        rc = LDAP_CONFIDENTIALITY_REQUIRED;
                        text = "unwilling to perform simple authentication "