[email protected] wrote:
> [Note: The previous patch did not fix the problem when
> the consumer's access was restricted to the replicated
> subtree. This patch fixes that.]
Both applied to git master, thanks.
>
> Perform the internal FIND_CSN search based at the backend's suffix with the
> privileges of the backend's root DN.
> ---
> servers/slapd/overlays/syncprov.c | 2 ++
> 1 files changed, 2 insertions(+), 0 deletions(-)
>
> diff --git a/servers/slapd/overlays/syncprov.c
> b/servers/slapd/overlays/syncprov.c
> index 0c148f9..a058e19 100644
> --- a/servers/slapd/overlays/syncprov.c
> +++ b/servers/slapd/overlays/syncprov.c
> @@ -661,6 +661,8 @@ again:
> if ( BER_BVISEMPTY(&cf.f_av_value )) {
> cf.f_av_value = *csn;
> }
> + fop.o_dn = op->o_bd->be_rootdn;
> + fop.o_ndn = op->o_bd->be_rootndn;
> fop.o_req_dn = op->o_bd->be_suffix[0];
> fop.o_req_ndn = op->o_bd->be_nsuffix[0];
> /* Look for exact match the first time */
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
