From: Pierangelo Masarati <ando@openldap.org>
Date: Sat, 20 Dec 2008 22:02:06 +0000 (+0000)
Subject: do not allow slapo-ppolicy to be global by now (ITS#5858)
X-Git-Tag: ACLCHECK_0~1023
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=0631c47576657ea7de92610c0182371f27209cee;p=openldap

do not allow slapo-ppolicy to be global by now (ITS#5858)
---

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 54607e2e81..05939ce986 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -2094,6 +2094,16 @@ ppolicy_db_init(
 {
 	slap_overinst *on = (slap_overinst *) be->bd_info;
 
+	if ( SLAP_ISGLOBALOVERLAY( be ) ) {
+		/* do not allow slapo-ppolicy to be global by now (ITS#5858) */
+		if ( cr ){
+			snprintf( cr->msg, sizeof(cr->msg), 
+				"slapo-ppolicy cannot be global" );
+			fprintf( stderr, "%s\n", cr->msg );
+		}
+		return 1;
+	}
+
 	/* Has User Schema been initialized yet? */
 	if ( !pwd_UsSchema[0].ad[0] ) {
 		const char *err;