Commit 67300800 authored by Luke Howard's avatar Luke Howard
Browse files

Allow the root DN to switch to any authorization identity.

parent 8e74ed4d
......@@ -679,6 +679,12 @@ int slap_sasl_authorized( Connection *conn,
goto DONE;
}
/* Allow the manager to authorize as any DN. */
if( be_isroot( conn->c_authz_backend, authcDN )) {
rc = LDAP_SUCCESS;
goto DONE;
}
/* Check source rules */
if( authz_policy & SASL_AUTHZ_TO ) {
rc = slap_sasl_check_authz( conn, authcDN, authzDN,
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment