From 4db84db74b4419040355f72ef138364b23841422 Mon Sep 17 00:00:00 2001
From: Ralf Haferkamp <ralf@openldap.org>
Date: Tue, 5 Feb 2008 12:16:21 +0000
Subject: [PATCH] Don't emit global ACLs for other database than frontendDB
 (ITS#5352)

---
 servers/slapd/bconfig.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/servers/slapd/bconfig.c b/servers/slapd/bconfig.c
index 1a265594ca..0be46d6b60 100644
--- a/servers/slapd/bconfig.c
+++ b/servers/slapd/bconfig.c
@@ -940,7 +940,12 @@ config_generic(ConfigArgs *c) {
 			AccessControl *a;
 			char *src, *dst, ibuf[11];
 			struct berval bv, abv;
-			for (i=0, a=c->be->be_acl; a; i++,a=a->acl_next) {
+			AccessControl *end;
+			if ( c->be == frontendDB )
+				end = NULL;
+			else
+				end = frontendDB->be_acl;
+			for (i=0, a=c->be->be_acl; a && a != end; i++,a=a->acl_next) {
 				abv.bv_len = snprintf( ibuf, sizeof( ibuf ), SLAP_X_ORDERED_FMT, i );
 				if ( abv.bv_len >= sizeof( ibuf ) ) {
 					ber_bvarray_free_x( c->rvalue_vals, NULL );
-- 
2.39.5