group acl extended format not recognised (ITS#123)

[334647@swin.edu.au]

Full_Name: Gerrit THomson
Version: 1.2.x
OS: linux redhat 5.2
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (136.186.1.117)


Group acl's are not being parsed using the format
group/group_objectclass/member_atribute
This is due to errors in aclparse.c code of slapd.

There are two fixs, one to fix a problem of recognising the extended format as a
group acl:

206         } else if ( strcasecmp( left, "group" ) == 0 ) {

replace with 

206         } else if ( strncasecmp( left, "group", 5 ) == 0 ) {

Also to fix the recognition of the extended parameters for the group
definition:

213           if ((value = strchr(right, '/')) != NULL) {

Should be replaced with 

213           if ((value = strchr(left, '/')) != NULL) {

This will fix it.

This was noticed when trying to use "group/groupofuniquenames/uniquemember",
with
data taken from a netscape directory service.

Cheers,
    Gerrit Thomson