From: Pierangelo Masarati <ando@openldap.org>
Date: Tue, 10 Jan 2006 13:17:31 +0000 (+0000)
Subject: don't idassert anon2anon (ITS#4321)
X-Git-Tag: OPENLDAP_REL_ENG_2_4_BP~360
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=7368ffb77aebbc075c822a5539448f5074c35c58;p=openldap

don't idassert anon2anon (ITS#4321)
---

diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c
index 54004ebee4..55984982f6 100644
--- a/servers/slapd/back-ldap/bind.c
+++ b/servers/slapd/back-ldap/bind.c
@@ -1366,8 +1366,14 @@ ldap_back_proxy_authz_ctrl(
 	}
 
 	switch ( mode ) {
-	case LDAP_BACK_IDASSERT_LEGACY:
 	case LDAP_BACK_IDASSERT_SELF:
+		if ( BER_BVISNULL( &ndn ) ) {
+			goto done;
+		}
+		assertedID = ndn;
+		break;
+
+	case LDAP_BACK_IDASSERT_LEGACY:
 		/* original behavior:
 		 * assert the client's identity */
 		if ( BER_BVISNULL( &ndn ) ) {