ITS#9100 relax domainScope check for absent value

This commit is contained in:
Howard Chu 2019-10-28 19:01:36 +00:00
parent 379f138098
commit 230b469669

View File

@ -1714,7 +1714,11 @@ static int parseDomainScope (
return LDAP_PROTOCOL_ERROR;
}
if ( !BER_BVISNULL( &ctrl->ldctl_value )) {
/* this should be checking BVISNULL, but M$ clients are broken
* and include the value even though the M$ spec says it must be
* omitted. ITS#9100.
*/
if ( !BER_BVISEMPTY( &ctrl->ldctl_value )) {
rs->sr_text = "domainScope control value not absent";
return LDAP_PROTOCOL_ERROR;
}