openldap/sme9/openldap-memberof-disallow-global.patch

Disallow memberof overlay setting on the frontend database.

If this bug gets a resolution upstream, this patch should be replaced.

Author: Jan Vcelak <jvcelak@redhat.com>
Resolves: #730745
Upstream ITS: #7249

diff a/servers/slapd/overlays/memberof.c b/servers/slapd/overlays/memberof.c
--- a/servers/slapd/overlays/memberof.c
+++ b/servers/slapd/overlays/memberof.c
@@ -1517,6 +1517,16 @@ memberof_db_init(
        slap_overinst   *on = (slap_overinst *)be->bd_info;
        memberof_t              *mo;
 
+       if ( SLAP_ISGLOBALOVERLAY( be ) ) {
+               /* do not allow memberof to be a global overlay now */
+               if ( cr ){
+                       snprintf( cr->msg, sizeof(cr->msg),
+                               "memberof overlay cannot be global" );
+                       Debug( LDAP_DEBUG_ANY, "%s\n", cr->msg, 0, 0 );
+               }
+               return 1;
+       }
+
        mo = (memberof_t *)ch_calloc( 1, sizeof( memberof_t ) );
 
        /* safe default */
1	vip-ire	1.1	Disallow memberof overlay setting on the frontend database.
2
3			If this bug gets a resolution upstream, this patch should be replaced.
4
5			Author: Jan Vcelak <jvcelak@redhat.com>
6			Resolves: #730745
7			Upstream ITS: #7249
8
9			diff a/servers/slapd/overlays/memberof.c b/servers/slapd/overlays/memberof.c
10			--- a/servers/slapd/overlays/memberof.c
11			+++ b/servers/slapd/overlays/memberof.c
12			@@ -1517,6 +1517,16 @@ memberof_db_init(
13			slap_overinst on = (slap_overinst )be->bd_info;
14			memberof_t *mo;
15
16			+ if ( SLAP_ISGLOBALOVERLAY( be ) ) {
17			+ /* do not allow memberof to be a global overlay now */
18			+ if ( cr ){
19			+ snprintf( cr->msg, sizeof(cr->msg),
20			+ "memberof overlay cannot be global" );
21			+ Debug( LDAP_DEBUG_ANY, "%s\n", cr->msg, 0, 0 );
22			+ }
23			+ return 1;
24			+ }
25			+
26			mo = (memberof_t *)ch_calloc( 1, sizeof( memberof_t ) );
27
28			/* safe default */