From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Tue, 11 Dec 2012 16:26:49 +0000 (+0000)
Subject: Only allow ANY for !*
X-Git-Tag: release_3_0_0_beta1~1377
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=59c0aa2975d1d4d9f88d72dd1f2f74811134aba7;p=thirdparty%2Ffreeradius-server.git

Only allow ANY for !*
---

diff --git a/src/modules/rlm_ldap/rlm_ldap.c b/src/modules/rlm_ldap/rlm_ldap.c
index dd1b6b2fa95..ab22b54fc0b 100644
--- a/src/modules/rlm_ldap/rlm_ldap.c
+++ b/src/modules/rlm_ldap/rlm_ldap.c
@@ -2236,10 +2236,10 @@ static int user_modify(ldap_instance *inst, REQUEST *request,
 		{
 			case T_BARE_WORD:
 				if (strcmp(value, "ANY") == 0) {
-					if (op != T_OP_SUB) {
+					if (op != T_OP_CMP_FALSE) {
 						radlog(L_ERR, "rlm_ldap (%s): "
 						       "ANY is only supported "
-						       "for delete operations ",
+						       "for !* operators",
 						       inst->xlat_name);
 						
 						goto error;	
@@ -2312,6 +2312,9 @@ static int user_modify(ldap_instance *inst, REQUEST *request,
 			case T_OP_SUB:
 				mod_s[total].mod_op = LDAP_MOD_DELETE;
 			break;
+			case T_OP_CMP_FALSE:
+				mod_s[total].mod_op = LDAP_MOD_DELETE;
+			break;
 #ifdef LDAP_MOD_INCREMENT
 			case T_OP_INCRM:
 				mod_s[total].mod_op = LDAP_MOD_INCREMENT;