From: Pierangelo Masarati <ando@openldap.org>
Date: Sat, 6 Jan 2007 00:45:38 +0000 (+0000)
Subject: import cleanup ITS#4781 enhancement from HEAD
X-Git-Tag: OPENLDAP_REL_ENG_2_3_33~15
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2001352b0a5ad3a0e8201bfb115fa77e3a4882de;p=thirdparty%2Fopenldap.git

import cleanup ITS#4781 enhancement from HEAD
---

diff --git a/servers/slapd/back-ldap/bind.c b/servers/slapd/back-ldap/bind.c
index 83c12237f3..2fb5f27488 100644
--- a/servers/slapd/back-ldap/bind.c
+++ b/servers/slapd/back-ldap/bind.c
@@ -1876,7 +1876,10 @@ ldap_back_is_proxy_authz( Operation *op, SlapReply *rs, ldap_back_send_t sendok,
 
 	default:
 		/* NOTE: rootdn can always idassert */
-		if ( BER_BVISNULL( &ndn ) && li->li_idassert_authz == NULL ) {
+		if ( BER_BVISNULL( &ndn )
+			&& li->li_idassert_authz == NULL
+			&& !( li->li_idassert_flags & LDAP_BACK_AUTH_AUTHZ_ALL ) )
+		{
 			if ( li->li_idassert_flags & LDAP_BACK_AUTH_PRESCRIPTIVE ) {
 				rs->sr_err = LDAP_INAPPROPRIATE_AUTH;
 				if ( sendok & LDAP_BACK_SENDERR ) {