From: Kurt Zeilenga <kurt@openldap.org>
Date: Mon, 5 Aug 2002 17:53:39 +0000 (+0000)
Subject: Patch: add OpenLDAPaci #public# access  (ITS#2005)
X-Git-Tag: NO_SLAP_OP_BLOCKS~1290
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=526d010635ba36825f995ffe4d9ce4b6eea564ea;p=openldap

Patch: add OpenLDAPaci #public# access  (ITS#2005)

			================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

I couldn't find a way for an OpenLDAPaci to grant public access to an
entry, so I added a dnType #public# for that.  It is in the position
of subjectDn in the draft, which seems kind of stupid, so I put it
in the position of dnType instead.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
---

diff --git a/servers/slapd/acl.c b/servers/slapd/acl.c
index 1295b99507..449138fae0 100644
--- a/servers/slapd/acl.c
+++ b/servers/slapd/acl.c
@@ -1746,10 +1746,10 @@ aci_mask(
 
 	if (ber_bvstrcasecmp( &aci_bv_access_id, &bv ) == 0) {
 		struct berval ndn;
-		rc = 1;
+		rc = 0;
 		if ( dnNormalize2(NULL, &sdn, &ndn) == LDAP_SUCCESS ) {
-			if (!dn_match( &op->o_ndn, &ndn))
-				rc = 0;
+			if (dn_match( &op->o_ndn, &ndn))
+				rc = 1;
 			free(ndn.bv_val);
 		}
 		return (rc);