File httpd-2.4.10-LDAP_authz_failures.patch of Package apache2

Overview Repositories Revisions Requests Users Attributes Meta

File httpd-2.4.10-LDAP_authz_failures.patch of Package apache2

From 5638f5eb571b69068e1c8f1e7a5075cf0fdb7ad0 Mon Sep 17 00:00:00 2001
From: Eric Covener <covener@apache.org>
Date: Sat, 11 Oct 2014 21:18:45 +0000
Subject: [PATCH] Merge r1613682 from trunk:

In 2.4.10, AuthLDAPBindDN might not be used for some LDAP searches, causing
LDAP authz failures if AuthLDAPBindDN was able to search through more of
LDAP than web users.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1631119 13f79535-47bb-0310-9956-ffa450edef68
---
 CHANGES                  | 4 ++++
 STATUS                   | 6 ------
 modules/ldap/util_ldap.c | 2 +-
 3 files changed, 5 insertions(+), 7 deletions(-)

Index: httpd-2.4.10/modules/ldap/util_ldap.c
===================================================================
--- httpd-2.4.10.orig/modules/ldap/util_ldap.c
+++ httpd-2.4.10/modules/ldap/util_ldap.c
@@ -1824,7 +1824,7 @@ start_over:
          * combination, which might be reused unintentionally next time this
          * connection is used from the connection pool.
          */
-        ldc->must_rebind = 0;
+        ldc->must_rebind = 1;
         ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "LDC %pp used for authn, must be rebound", ldc);
     }

Places

File httpd-2.4.10-LDAP_authz_failures.patch of Package apache2

Places