From: Howard Chu <hyc@openldap.org>
Date: Thu, 27 Mar 2025 16:11:17 +0000 (+0000)
Subject: ITS#10299 slapacl: use dummy entry_get in dry-run mode
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f1ca58680ae5616348e75f2ba59891358ed39e51;p=thirdparty%2Fopenldap.git

ITS#10299 slapacl: use dummy entry_get in dry-run mode
---

diff --git a/servers/slapd/slapacl.c b/servers/slapd/slapacl.c
index 9c67e5e1c0..020c05d892 100644
--- a/servers/slapd/slapacl.c
+++ b/servers/slapd/slapacl.c
@@ -60,6 +60,18 @@ print_access(
 	return rc;
 }
 
+static int
+slapacl_entry_get(
+	Operation *op,
+	struct berval *dn,
+	ObjectClass *oc,
+	AttributeDescription *ad,
+	int rw,
+	Entry **e )
+{
+	return LDAP_UNWILLING_TO_PERFORM;
+}
+
 int
 slapacl( int argc, char **argv )
 {
@@ -293,6 +305,8 @@ slapacl( int argc, char **argv )
 				}
 			}
 		}
+	} else {
+		op->o_bd->be_fetch = slapacl_entry_get;
 	}
 
 	for ( ; argc--; argv++ ) {