From c62a82b07e1bcc4c795cb5185ee9f16406b05bd9 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Wed, 3 Oct 2012 09:12:14 -0700 Subject: [PATCH] ITS#7403, #6296 fix AUTHZ_BACKEND handling c_authz_cookie should only be set on explicit Bind requests. --- servers/slapd/back-ldap/bind.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c index b099ae7df1..b7627af8cc 100644 --- a/servers/slapd/back-ldap/bind.c +++ b/servers/slapd/back-ldap/bind.c @@ -1581,7 +1581,6 @@ retry:; rc = ldap_back_op_result( lc, op, rs, msgid, -1, ( sendok | LDAP_BACK_BINDING ) ); if ( rc == LDAP_SUCCESS ) { - op->o_conn->c_authz_cookie = op->o_bd->be_private; LDAP_BACK_CONN_ISBOUND_SET( lc ); } @@ -2411,7 +2410,6 @@ ldap_back_proxy_authz_bind( ber_bvreplace( &lc->lc_bound_ndn, &bv ); } #endif /* SLAP_AUTH_DN */ - op->o_conn->c_authz_cookie = op->o_bd->be_private; LDAP_BACK_CONN_ISBOUND_SET( lc ); break; @@ -2482,7 +2480,6 @@ ldap_back_proxy_authz_bind( * so that referral chasing is attempted using the right * identity */ LDAP_BACK_CONN_ISBOUND_SET( lc ); - op->o_conn->c_authz_cookie = op->o_bd->be_private; if ( !BER_BVISNULL( binddn ) ) { ber_bvreplace( &lc->lc_bound_ndn, binddn ); } -- 2.39.5