ITS#9121 fix memberOf eval

Must disable ACL group caching when checking membership

diff --git a/servers/slapd/overlays/dynlist.c b/servers/slapd/overlays/dynlist.c
index 0b1f8f683ae32ea2fba9b7fd297b47b3f3459cb7..721eb728d626a18155631962741b17772188ac34 100644 (file)
--- a/servers/slapd/overlays/dynlist.c
+++ b/servers/slapd/overlays/dynlist.c
@@ -973,7 +973,10 @@ dynlist_search2resp( Operation *op, SlapReply *rs )
                                dyn = ptr->avl_data;
                                for ( dlm = dyn->dy_dli->dli_dlm; dlm; dlm = dlm->dlm_next ) {
                                        if ( dlm->dlm_memberOf_ad ) {
-                                               rc = backend_group( op, NULL, &dyn->dy_name,
+                                               Operation o = *op;
+                                               o.o_do_not_cache = 1;
+                                               o.o_groups = NULL;
+                                               rc = backend_group( &o, NULL, &dyn->dy_name,
                                                        &e->e_nname, dyn->dy_dli->dli_oc, dyn->dy_dli->dli_ad );
                                                if ( rc == LDAP_SUCCESS ) {
                                                        /* ensure e is modifiable, but do not replace