Re: commit: ldap/servers/slapd acl.c

[Pierangelo Masarati <masarati@aero.polimi.it>]

"Kurt D. Zeilenga" wrote:
> 
> At 09:34 AM 2002-01-14, Kurt D. Zeilenga wrote:
> >A simple way to handle this is just to set a flag
> >in the Connection/Operation structure for each of
> >these special cases and then to test the flag instead
> >of the DNs...  This will work well for rootdn and
> >updatedn.  (Note needed for anonymous as this is already
> >a simple check)

This is how I implemented it ...

> 
> I need to retract this.  As rootdn/updatedn are backend
> specific and Connection/Operation structures are not, this
> approach is flawed.

... then I realized on my own that the check for rootdn 
is backend specific, as each operation is performed by
op->o_ndn, which ought to be the same as conn->c_ndn
but may belong to another backend :( I need to go back 
and study a cookie based on o_ndn and backend.  But then
it might be not worth replacing a strcmp now and then ...

Ando

-- 
Dr. Pierangelo Masarati               | voice: +39 02 2399 8309
Dip. Ing. Aerospaziale                | fax:   +39 02 2399 8334
Politecnico di Milano                 |
mailto:pierangelo.masarati@polimi.it
via La Masa 34, 20156 Milano, Italy   |
http://www.aero.polimi.it/~masarati