Better bad DN handling

diff --git a/servers/slapd/aclparse.c b/servers/slapd/aclparse.c
index 80ffa377bff833f7edb82b533cde964a7cec5bd1..d420a0b4c72d5f4c34023b1c6d5d9fe699e99750 100644 (file)
--- a/servers/slapd/aclparse.c
+++ b/servers/slapd/aclparse.c
@@ -464,6 +464,15 @@ parse_acl(
                                                acl_usage();
                                        }
 
+                                       if( b->a_dn_at->ad_type->sat_equality == NULL )
+                                       {
+                                               fprintf( stderr,
+                                                       "%s: line %d: dnattr \"%s\": "
+                                                       "inappropriate matching (no EQUALITY)\n",
+                                                       fname, lineno, right );
+                                               acl_usage();
+                                       }
+
                                        continue;
                                }