From: Howard Chu <hyc@openldap.org>
Date: Thu, 23 Apr 2015 04:58:50 +0000 (+0100)
Subject: ITS#8108 silence rootdn check on hidden backends
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=999391f9c72b7125c0ed76b3efb15b6c4fc304b6;p=openldap

ITS#8108 silence rootdn check on hidden backends

select_backend() skips hidden backends so it fails to match the
rootdn of a database that has been hidden. rootpw tries to see
if the rootdn matches the current backend but the check fails
when hidden. Ignore this check on hidden backends since one
cannot Bind to a hidden backend anyway.
---

diff --git a/servers/slapd/bconfig.c b/servers/slapd/bconfig.c
index d726a56427..6268a99b30 100644
--- a/servers/slapd/bconfig.c
+++ b/servers/slapd/bconfig.c
@@ -3285,7 +3285,7 @@ config_rootpw(ConfigArgs *c) {
 	}
 
 	tbe = select_backend(&c->be->be_rootndn, 0);
-	if(tbe != c->be) {
+	if(tbe != c->be && !SLAP_DBHIDDEN( c->be )) {
 		snprintf( c->cr_msg, sizeof( c->cr_msg ), "<%s> can only be set when rootdn is under suffix",
 			c->argv[0] );
 		Debug(LDAP_DEBUG_ANY, "%s: %s\n",