mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-21 03:10:25 +08:00
Allow the root DN to switch to any authorization identity.
This commit is contained in:
parent
8e74ed4dfc
commit
6730080081
@ -679,6 +679,12 @@ int slap_sasl_authorized( Connection *conn,
|
||||
goto DONE;
|
||||
}
|
||||
|
||||
/* Allow the manager to authorize as any DN. */
|
||||
if( be_isroot( conn->c_authz_backend, authcDN )) {
|
||||
rc = LDAP_SUCCESS;
|
||||
goto DONE;
|
||||
}
|
||||
|
||||
/* Check source rules */
|
||||
if( authz_policy & SASL_AUTHZ_TO ) {
|
||||
rc = slap_sasl_check_authz( conn, authcDN, authzDN,
|
||||
|
Loading…
Reference in New Issue
Block a user