From: Pierangelo Masarati <ando@openldap.org>
Date: Fri, 14 Oct 2005 23:25:57 +0000 (+0000)
Subject: don't copy o_ndn into lc_bound_ndn, otherwise we end up in a bind with DN but no... 
X-Git-Tag: OPENLDAP_REL_ENG_2_2_MP~250
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=474473363836b6c222e9ffd54d745071b903d673;p=openldap

don't copy o_ndn into lc_bound_ndn, otherwise we end up in a bind with DN but no password\!
---

diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c
index 93f5cff445..a34dc44e0f 100644
--- a/servers/slapd/back-ldap/bind.c
+++ b/servers/slapd/back-ldap/bind.c
@@ -503,11 +503,15 @@ ldap_back_getconn( Operation *op, SlapReply *rs, ldap_back_send_t sendok )
 		} else {
 			BER_BVZERO( &lc->lc_cred );
 			BER_BVZERO( &lc->lc_bound_ndn );
+#if 0
+			/* FIXME: if we set lc_bound_ndn = o_ndn
+			 * we end up with a bind with DN but no password! */
 			if ( !BER_BVISEMPTY( &op->o_ndn )
 				&& SLAP_IS_AUTHZ_BACKEND( op ) )
 			{
 				ber_dupbv( &lc->lc_bound_ndn, &op->o_ndn );
 			}
+#endif
 		}
 
 #ifdef HAVE_TLS