ITS#4654, I've been running with this patch in place for several weeks.

diff --git a/CHANGES b/CHANGES
index 171ada963eb862be4fb0994d43feef77bd93c67a..59105ab9c9c89e3de517f927edb99901f7caee5a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,7 @@ OpenLDAP 2.3.28 Engineering
        Fixed libldap ldap.conf max line length (ITS#4669)
        Added ldapsearch bad filter pattern check (ITS#4647)
        Fixed slapd-monitor locking with scope "subordinate" (ITS#4668)
+       Fixed slapd global access controls initialization (ITS#4654)
 
 OpenLDAP 2.3.27 Release
        Fixed libldap dangling pointer issue (previous fix was broken) (ITS#4405)

diff --git a/servers/slapd/backend.c b/servers/slapd/backend.c
index 9bfec4a583e8736b973e6309b981b4b52af20ad3..bad3fccaa8897fce7a2e85d076332262eac92d8e 100644 (file)
--- a/servers/slapd/backend.c
+++ b/servers/slapd/backend.c
@@ -248,7 +248,8 @@ int backend_startup(Backend *be)
                                return rc;
                        }
                }
-
+               /* append global access controls */
+               acl_append( &be->be_acl, frontendDB->be_acl, -1 );
                return backend_startup_one( be );
        }