Howard Chu wrote:
Howard Chu wrote:
> Michael Ströder wrote:
>> Quanah Gibson-Mount wrote:
>>> If you know how to build OpenLDAP manually, and would like to participate in
>>> testing the next set of code for the 2.4.33 release, please do so.
>>
>> test039 fails with mdb
>
> Not just mdb. The error is in back-ldap. Looking into it.
>
Seems to be due to an interaction between the patch for ITS#7403 and ITS#6296.
SLAP_IS_AUTHZ_BACKEND is only supposed to be true if the current backend
explicitly authenticated the current connection (i.e., it received an actual
Bind request from a remote client).
Due to ITS#6296, the conn->c_authz_cookie is being set for internal Binds as
well, including internal Binds done to perform proxyAuthorization to a remote
server. This is not what SLAP_IS_AUTHZ_BACKEND is for. Some different fix for
#6296 is needed.
Fixed now in master.
--
-- Howard Chu
CTO, Symas Corp.
http://www.symas.com
Director, Highland Sun
http://highlandsun.com/hyc/
Chief Architect, OpenLDAP
http://www.openldap.org/project/