massage bound dn only if operating on authz backend

diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c
index 43f7c0e15eb1ebe5bba73d08da04f61bf2690c01..0212351faa8482c4966aaee511ddf8a489797a6e 100644 (file)
--- a/servers/slapd/back-ldap/bind.c
+++ b/servers/slapd/back-ldap/bind.c
@@ -320,7 +320,8 @@ ldap_back_getconn(Operation *op, SlapReply *rs)
                } else {
                        lc->cred.bv_len = 0;
                        lc->cred.bv_val = NULL;
-                       if ( op->o_conn->c_dn.bv_len != 0 ) {
+                       if ( op->o_conn->c_dn.bv_len != 0
+                                       && ( op->o_bd == op->o_conn->c_authz_backend ) ) {
                                
                                /*
                                 * Rewrite the bind dn if needed