password may be NULL. CID #1524744

diff --git a/src/modules/rlm_ldap/rlm_ldap.c b/src/modules/rlm_ldap/rlm_ldap.c
index 1e07003f90d3b50f46aee21f462522cb3f9d6793..2d1287356564ed8f0e3b8291f2c27796b70cb5af 100644 (file)
--- a/src/modules/rlm_ldap/rlm_ldap.c
+++ b/src/modules/rlm_ldap/rlm_ldap.c
@@ -1479,7 +1479,14 @@ static unlang_action_t mod_authorize_resume(rlm_rcode_t *p_result, UNUSED int *p
                        fr_ldap_thread_t *thread = talloc_get_type_abort(module_rlm_thread_by_data(inst)->data,
                                                                         fr_ldap_thread_t);
 
+                       if (!password) {
+                               REDEBUG("Failed to find &control.Password.Cleartext");
+                               rcode = RLM_MODULE_FAIL;
+                               goto finish;
+                       }
+
                        RDEBUG2("Binding as %s for eDirectory authorization checks", autz_ctx->dn);
+
                        /*
                         *      Bind as the user
                         */