From 102fda1007152f0af0dffcb4523f55e82057d7a1 Mon Sep 17 00:00:00 2001
From: Pierangelo Masarati <ando@openldap.org>
Date: Fri, 3 Dec 2004 08:21:05 +0000
Subject: [PATCH] fix ITS#3411

---
 CHANGES                   | 1 +
 servers/slapd/saslauthz.c | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/CHANGES b/CHANGES
index 10ff50d445..b7edc808d2 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,7 @@
 OpenLDAP 2.2 Change Log
 
 OpenLDAP 2.2.20 Engineering
+	Fixed slapd sanity check on protocol in authz-regexp URI (ITS#3411)
 	Fixed back-sql segfault when logging and delete_rule is NULL (ITS#3407)
 
 OpenLDAP 2.2.19 Release
diff --git a/servers/slapd/saslauthz.c b/servers/slapd/saslauthz.c
index c42a7eb8a1..1ac6a32c39 100644
--- a/servers/slapd/saslauthz.c
+++ b/servers/slapd/saslauthz.c
@@ -314,12 +314,14 @@ is_dn:		bv.bv_len = uri->bv_len - (bv.bv_val - uri->bv_val);
 	rc = ldap_url_parse( uri->bv_val, &ludp );
  	switch ( rc ) {
  	case LDAP_URL_SUCCESS:
+#if 0 /* leave this for later releases */
  		if ( strcasecmp( ludp->lud_scheme, "ldap" ) != 0 ) {
  			/*
  			 * must be ldap:///
  			 */
  			return LDAP_PROTOCOL_ERROR;
  		}
+#endif
  		break;
  
  	case LDAP_URL_ERR_BADSCHEME:
-- 
2.39.5