From: Howard Chu <hyc@openldap.org>
Date: Mon, 22 Mar 2021 09:18:32 +0000 (+0000)
Subject: ITS#8967 additional check
X-Git-Tag: OPENLDAP_REL_ENG_2_5_3BETA~3^2~35
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5398d44a36809033d970cdf5e7cfc8035806cfaf;p=thirdparty%2Fopenldap.git

ITS#8967 additional check
---

diff --git a/servers/slapd/back-mdb/search.c b/servers/slapd/back-mdb/search.c
index 43cd4bc4aa..edcf68fe1d 100644
--- a/servers/slapd/back-mdb/search.c
+++ b/servers/slapd/back-mdb/search.c
@@ -774,7 +774,7 @@ adminlimit:
 	if ( nsubs < ncand ) {
 		int rc;
 		/* Do scope-based search */
-		if ( nsubs > (unsigned) op->ors_limit->lms_s_unchecked )
+		if ( admincheck && nsubs > (unsigned) op->ors_limit->lms_s_unchecked )
 			goto adminlimit;
 
 		/* if any alias scopes were set, save them */