Viewing Software Bugs/6574
Full headers

Major security issue: yes  no

Notes:
a fix is in HEAD fixed in RE24
Notification:

Date: Tue, 15 Jun 2010 18:41:10 +0000
From: masarati@aero.polimi.it
To: openldap-its@OpenLDAP.org
Subject: back-meta does not rebind as user when retrying

Full_Name: Pierangelo Masarati
Version: HEAD/re24
OS: irrelevant
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (129.72.141.2)
Submitted by: ando


While retrying, back-meta destroys the failed connection to a remote target, and
re-creates it.  However, it loses the credentials, while restoring the bound DN.
 As a consequence, the connection looks bound, but it's actually anonymous.  A
fix is coming.  The fix either preserves the credentials, when rebind-as-user is
set, or turns the connection into anonymous.  The latter case is of little
practical use, and should only be used in conjunction with idassert, so that in
case of retry, from that point on identity is asserted.

p.