openldap/sme9/openldap-memberof-disallow-global.patch

Disallow memberof overlay setting on the frontend database.

If this bug gets a resolution upstream, this patch should be replaced.

Author: Jan Vcelak <jvcelak@redhat.com>
Resolves: #730745
Upstream ITS: #7249

diff a/servers/slapd/overlays/memberof.c b/servers/slapd/overlays/memberof.c
--- a/servers/slapd/overlays/memberof.c
+++ b/servers/slapd/overlays/memberof.c
@@ -1517,6 +1517,16 @@ memberof_db_init(
        slap_overinst   *on = (slap_overinst *)be->bd_info;
        memberof_t              *mo;
 
+       if ( SLAP_ISGLOBALOVERLAY( be ) ) {
+               /* do not allow memberof to be a global overlay now */
+               if ( cr ){
+                       snprintf( cr->msg, sizeof(cr->msg),
+                               "memberof overlay cannot be global" );
+                       Debug( LDAP_DEBUG_ANY, "%s\n", cr->msg, 0, 0 );
+               }
+               return 1;
+       }
+
        mo = (memberof_t *)ch_calloc( 1, sizeof( memberof_t ) );
 
        /* safe default */
1	Disallow memberof overlay setting on the frontend database.
2
3	If this bug gets a resolution upstream, this patch should be replaced.
4
5	Author: Jan Vcelak <jvcelak@redhat.com>
6	Resolves: #730745
7	Upstream ITS: #7249
8
9	diff a/servers/slapd/overlays/memberof.c b/servers/slapd/overlays/memberof.c
10	--- a/servers/slapd/overlays/memberof.c
11	+++ b/servers/slapd/overlays/memberof.c
12	@@ -1517,6 +1517,16 @@ memberof_db_init(
13	slap_overinst on = (slap_overinst )be->bd_info;
14	memberof_t *mo;
15
16	+ if ( SLAP_ISGLOBALOVERLAY( be ) ) {
17	+ /* do not allow memberof to be a global overlay now */
18	+ if ( cr ){
19	+ snprintf( cr->msg, sizeof(cr->msg),
20	+ "memberof overlay cannot be global" );
21	+ Debug( LDAP_DEBUG_ANY, "%s\n", cr->msg, 0, 0 );
22	+ }
23	+ return 1;
24	+ }
25	+
26	mo = (memberof_t *)ch_calloc( 1, sizeof( memberof_t ) );
27
28	/* safe default */