From: Kurt Zeilenga <kurt@openldap.org>
Date: Sat, 19 Jun 1999 05:11:18 +0000 (+0000)
Subject: All "o=foo" add to suffix "" if bound as root.
X-Git-Tag: OPENLDAP_REL_ENG_2_BP~256
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=52e69dfc14cf283e0f3183868db853073b1a5207;p=openldap

All "o=foo" add to suffix "" if bound as root.
---

diff --git a/servers/slapd/back-bdb2/add.c b/servers/slapd/back-bdb2/add.c
index f4e40709c6..1f51d43d52 100644
--- a/servers/slapd/back-bdb2/add.c
+++ b/servers/slapd/back-bdb2/add.c
@@ -52,9 +52,13 @@ bdb2i_back_add_internal(
 	 * add the entry.
 	 */
 
-	if ( (pdn = dn_parent( be, e->e_ndn )) != NULL ) {
+	pdn = dn_parent( be, e->e_ndn );
+
+	if( pdn != NULL && *pdn != '\0' && !be_issuffix(be, "") ) {
 		char *matched = NULL;
 
+		assert( *pdn != '\0' );
+
 		/* get parent with writer lock */
 		if ( (p = bdb2i_dn2entry_w( be, pdn, &matched )) == NULL ) {
 			Debug( LDAP_DEBUG_TRACE, "parent does not exist\n", 0,
@@ -93,10 +97,17 @@ bdb2i_back_add_internal(
 		}
 
 	} else {
+		if(pdn != NULL) {
+			assert( *pdn == '\0' );
+			free(pdn);
+		}
+
 		/* no parent, must be adding entry to root */
 		if ( ! be_isroot( be, op->o_ndn ) ) {
-			Debug( LDAP_DEBUG_TRACE, "no parent & not root\n", 0,
-			    0, 0 );
+			Debug( LDAP_DEBUG_TRACE, "%s add denied\n",
+				pdn == NULL ? "suffix" : "entry at root",
+				0, 0 );
+
 			send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
 			    "", "" );