From: Kurt Zeilenga <kurt@openldap.org>
Date: Sat, 17 Mar 2001 05:31:51 +0000 (+0000)
Subject: Don't attempt to return empty referrals.
X-Git-Tag: OPENLDAP_REL_ENG_2_0_8~25
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=59af9578353bdb19d01c708543a78e28765eac8e;p=thirdparty%2Fopenldap.git

Don't attempt to return empty referrals.
---

diff --git a/servers/slapd/passwd.c b/servers/slapd/passwd.c
index 79dbe4340d..d331d65750 100644
--- a/servers/slapd/passwd.c
+++ b/servers/slapd/passwd.c
@@ -46,7 +46,14 @@ int passwd_extop(
 		} else if( conn->c_authz_backend->be_update_ndn != NULL ) {
 			/* we SHOULD return a referral in this case */
 			*refs = conn->c_authz_backend->be_update_refs;
-			rc = LDAP_REFERRAL;
+
+			if( *refs ) {
+				rc = LDAP_REFERRAL;
+
+			} else {
+				rc = LDAP_UNWILLING_TO_PERFORM;
+				*text = "authorization database is a read-only replica";
+			}
 
 		} else {
 			rc = conn->c_authz_backend->be_extended(