svn commit: r1675229 - /directory/apacheds/trunk/interceptors/authn/src/main/java/org/apache/directory/server/core/authn/DelegatingAuthenticator.java

[el...@apache.org]

Author: elecharny
Date: Tue Apr 21 23:48:58 2015
New Revision: 1675229

URL: http://svn.apache.org/r1675229
Log:
Fixed the check for the delegateBaseDN

Modified:
    directory/apacheds/trunk/interceptors/authn/src/main/java/org/apache/directory/server/core/authn/DelegatingAuthenticator.java

Modified: directory/apacheds/trunk/interceptors/authn/src/main/java/org/apache/directory/server/core/authn/DelegatingAuthenticator.java
URL: http://svn.apache.org/viewvc/directory/apacheds/trunk/interceptors/authn/src/main/java/org/apache/directory/server/core/authn/DelegatingAuthenticator.java?rev=1675229&r1=1675228&r2=1675229&view=diff
==============================================================================
--- directory/apacheds/trunk/interceptors/authn/src/main/java/org/apache/directory/server/core/authn/DelegatingAuthenticator.java (original)
+++ directory/apacheds/trunk/interceptors/authn/src/main/java/org/apache/directory/server/core/authn/DelegatingAuthenticator.java Tue Apr 21 23:48:58 2015
@@ -232,7 +232,9 @@ public class DelegatingAuthenticator ext
         // First, check that the Bind DN is under the delegateBaseDn
         Dn bindDn = bindContext.getDn();
 
-        if ( ( delegateBaseDn != null ) && ( !bindDn.isDescendantOf( delegateBaseDn ) ) )
+        // Don't authenticate using this authenticator if the Bind ND is not a descendant of the
+        // configured delegate base DN (or if it's null)
+        if ( ( delegateBaseDn == null ) || ( !bindDn.isDescendantOf( delegateBaseDn ) ) )
         {
             return null;
         }