diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2016-01-21 19:16:30 +0200 |
|---|---|---|
| committer | Alexander Bokovoy <abokovoy@redhat.com> | 2016-01-26 13:38:50 +0200 |
| commit | 00468e8eebd455ab4e41d4d86772fb5f8a745d0a (patch) | |
| tree | 708f5f5504bbb5ed5ed0b27c0dba8812bd134a49 /src/back-sch-idview.c | |
| parent | 5eaad9c4c218d9a59f6930a29f5bee54235c4fab (diff) | |
| download | slapi-nis-00468e8eebd455ab4e41d4d86772fb5f8a745d0a.tar.gz slapi-nis-00468e8eebd455ab4e41d4d86772fb5f8a745d0a.tar.xz slapi-nis-00468e8eebd455ab4e41d4d86772fb5f8a745d0a.zip | |
idviews: bind with original DN if ID view does not override uid attribute
With ID Views in FreeIPA one can override different kinds of attributes,
including the uid. When uid attribute is overriden, LDAP BINDs with
DNs using new (overridden) uid are properly modified to reference the
original (non-overridden) object.
However, when uid attribute is not overridden, slapi-nis did mistakenly
avoided to build a reference to the original object without ID view.
This resulted in inability to do LDAP BIND as overriden DN with original
uid attribute.
Fix the issue by always processing a DN after removing ID view reference
from it, whether RDN value (uid) was replaced or not.
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1301300
Diffstat (limited to 'src/back-sch-idview.c')
| -rw-r--r-- | src/back-sch-idview.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/back-sch-idview.c b/src/back-sch-idview.c index 8ffab91..8842906 100644 --- a/src/back-sch-idview.c +++ b/src/back-sch-idview.c @@ -311,7 +311,7 @@ idview_replace_bval_by_override(const char *bval_usage, const char *attr_name, } attr_val = slapi_value_new_berval(bval); - slapi_log_error(SLAPI_LOG_FATAL, cbdata->state->plugin_desc->spd_id, + slapi_log_error(SLAPI_LOG_PLUGIN, cbdata->state->plugin_desc->spd_id, "Searching for an override of the %s %s with %s=%*s from the overrides\n.", bval_usage, attr_name, attr_name, (int) bval->bv_len, bval->bv_val); @@ -347,7 +347,7 @@ idview_replace_bval_by_override(const char *bval_usage, const char *attr_name, slapi_ber_bvdone(bval); slapi_ber_bvcpy(bval, slapi_value_get_berval(anchor_val)); anchor_override_found = TRUE; - slapi_log_error(SLAPI_LOG_FATAL, cbdata->state->plugin_desc->spd_id, + slapi_log_error(SLAPI_LOG_PLUGIN, cbdata->state->plugin_desc->spd_id, "Overriding the %s %s with %s=%*s from the override %s\n.", bval_usage, attr_name, IPA_IDVIEWS_ATTR_ANCHORUUID, (int) bval->bv_len, bval->bv_val, |