From: Kurt Zeilenga <kurt@openldap.org>
Date: Thu, 10 Oct 2002 03:42:47 +0000 (+0000)
Subject: disallow bind_simple_unprotected requires ssf > 1
X-Git-Tag: OPENLDAP_REL_ENG_2_1_6~15
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=f0a979c06d92e419d3fe0f21d897794a27730579;p=openldap

disallow bind_simple_unprotected requires ssf > 1
---

diff --git a/servers/slapd/bind.c b/servers/slapd/bind.c
index 646b72f657..1129fa6f43 100644
--- a/servers/slapd/bind.c
+++ b/servers/slapd/bind.c
@@ -419,7 +419,7 @@ do_bind(
 			goto cleanup;
 
 		} else if (( global_disallows & SLAP_DISALLOW_BIND_SIMPLE_UNPROTECTED )
-			&& ( op->o_ssf < global_ssf_set.sss_ssf ))
+			&& ( op->o_ssf <= 1 ))
 		{
 			rc = LDAP_CONFIDENTIALITY_REQUIRED;
 			text = "unwilling to perform simple authentication "