From: Pierangelo Masarati <ando@openldap.org>
Date: Thu, 31 Aug 2006 16:21:54 +0000 (+0000)
Subject: don't leak identity
X-Git-Tag: OPENLDAP_REL_ENG_2_3_MP~231
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=8a71ac37401919e456410c9319314d79873272b0;p=openldap

don't leak identity
---

diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c
index 056ea30a5e..9d36a4a768 100644
--- a/servers/slapd/back-ldap/bind.c
+++ b/servers/slapd/back-ldap/bind.c
@@ -1698,7 +1698,7 @@ ldap_back_proxy_authz_bind( ldapconn_t *lc, Operation *op, SlapReply *rs, ldap_b
 		 * so that referral chasing is attempted using the right
 		 * identity */
 		LDAP_BACK_CONN_ISBOUND_SET( lc );
-		ber_dupbv( &lc->lc_bound_ndn, &binddn );
+		ber_bvreplace( &lc->lc_bound_ndn, &binddn );
 
 		if ( LDAP_BACK_SAVECRED( li ) ) {
 			if ( !BER_BVISNULL( &lc->lc_cred ) ) {