From: Howard Chu <hyc@openldap.org>
Date: Sun, 2 Jul 2006 02:50:13 +0000 (+0000)
Subject: ITS#4596 control can be critical
X-Git-Tag: OPENLDAP_REL_ENG_2_4_3ALPHA~9^2~68
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=23a6aa373b78e72425cbf1b7ee3ad8144020ea5f;p=openldap

ITS#4596 control can be critical
---

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index f8c7971a08..63f192dcc3 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -1928,11 +1928,9 @@ ppolicy_parseCtrl(
 		rs->sr_text = "passwordPolicyRequest control value not empty";
 		return LDAP_PROTOCOL_ERROR;
 	}
-	if ( ctrl->ldctl_iscritical ) {
-		rs->sr_text = "passwordPolicyRequest control invalid criticality";
-		return LDAP_PROTOCOL_ERROR;
-	}
-	op->o_ctrlflag[ppolicy_cid] = SLAP_CONTROL_NONCRITICAL;
+	op->o_ctrlflag[ppolicy_cid] = ctrl->ldctl_iscritical
+		? SLAP_CONTROL_CRITICAL
+		: SLAP_CONTROL_NONCRITICAL;
 
 	return LDAP_SUCCESS;
 }