You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Brad Nicholes <BN...@novell.com> on 2004/11/04 16:46:26 UTC
RE: [PATCH]Re: Adding a new user DN cache to authnz_ldap...
Good point. I will get the patch committed
Brad
>>> "Jari Ahonen" <ja...@progress.com> Thursday, November 04, 2004
7:39:01 AM >>>
Brad,
I think this patch should be applied to the current HEAD
util_ldap.c code. It prevents util_ldap_cache_getuserdn()
timestamping cache entries with bindpw.
- Jari
----- cut here ----- cut here -----
--- util_ldap.c.orig 2004-11-02 00:43:24.000000000 +0100
+++ util_ldap.c 2004-11-04 15:34:23.000000000 +0100
@@ -1096,7 +1096,12 @@
/* Nothing in cache, insert new entry */
util_ald_cache_insert(curl->search_cache,
&the_search_node);
}
- else {
+ /*
+ * Don't update lastbind on entries with bindpw because
+ * we haven't verified that password. It's OK to update
+ * the entry if there is no password in it.
+ */
+ else if (!search_nodep->bindpw) {
/* Cache entry is valid, update lastbind */
search_nodep->lastbind = the_search_node.lastbind;
}
----- cut here ----- cut here -----
>