(ITS#7350) aclparse.c acl_unparse() attrval empty DN

[daniel@pluta.biz]

Full_Name: Daniel Pluta
Version: MASTER
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (2001:470:9feb:ff03:4dbf:1141:9dad:2f88)


It seems to me, that the following acl statement isn't correctly unparsed within
aclparse.c:

to dn.base="ou=persons,o=test" attrs=seeAlso val/distinguishedNameMatch="" by
users read


Starting slapd using loglevel 128 reports:

Backend ACL: access to dn.base="ou=persons,o=test"
 attrs=seeAlso
        by users read

I would have expected:

Backend ACL: access to dn.base="ou=persons,o=test"
 attrs=seeAlso
 val/distinguishedNameMatch=""
        by users read


As the empty DN is empty, the problem seems to be located in aclparse.c's
acl_unparse()'s statement

if ( !BER_BVISEMPTY( &a->acl_attrval ) )

or even in the parse_acl() flagless spliting into left and right.