Re: SASL regex segmentation faults with group based acls (ITS#1978)

[Kurt@OpenLDAP.org]

I've committed a patch (HEAD) based, in part, on your patch.
But instead of zapping the cache on the subsequent bind, my
version avoids populating the cache in the first place.
Please test.

At 08:45 PM 2002-07-24, Kurt@OpenLDAP.org wrote:
>At 02:59 PM 2002-07-22, simon@sxw.org.uk wrote:
>>Full_Name: Simon Wilkinson
>>Version: 2.1.2, 2.1.3 and CVS head
>>OS: Linux
>>URL: http://www.sxw.org.uk/computing/patches/openldap-saslbugfix.patch
>>Submission from: (NULL) (213.122.171.48)
>
>Why do you need to reset groups after successful bind?
>This appears to be unnecessary.
>
>>The code to do in-directory lookups for SASLregex performs its backend searches
>>with the connection structure set to be NULL. This results in a segmentation
>>fault
>>when backend_group attempts to cache results in the connection structure.
>>
>>Having asked on the openldap-devel list, the patch at the URL noted fixes the
>>SASL code to pass around connection information, and extracts the code to
>>reset the cached group information into a procedure of its own, in order that it
>>
>>can be called whenever connection DN information is changed.