From f2cba910d87210cb75d097d003282a203ece6535 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Ond=C5=99ej=20Kuzn=C3=ADk?= <ondra@mistotebe.net>
Date: Thu, 16 Jan 2025 15:27:20 +0000
Subject: [PATCH] ITS#7249 Disallow memberof-addcheck when memberof is global

---
 servers/slapd/overlays/memberof.c | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/servers/slapd/overlays/memberof.c b/servers/slapd/overlays/memberof.c
index 391c94ee0c..e50457ba17 100644
--- a/servers/slapd/overlays/memberof.c
+++ b/servers/slapd/overlays/memberof.c
@@ -2151,6 +2151,15 @@ mo_cf_gen( ConfigArgs *c )
 
 		case MO_ADDCHECK:
 			if ( c->value_int ) {
+				if ( SLAP_ISGLOBALOVERLAY( c->be ) ) {
+					snprintf( c->cr_msg, sizeof( c->cr_msg ),
+						"addcheck functionality not supported "
+						"when memberof is a global overlay",
+						c->argv[ 1 ] );
+					Debug( LDAP_DEBUG_ANY, "%s: %s.\n",
+						c->log, c->cr_msg );
+					return 1;
+				}
 				mo->mo_flags |= MEMBEROF_FADDCHECK;
 
 			} else {
-- 
2.47.3