Commit 0a97d98d authored by Bradley Nicholes's avatar Bradley Nicholes
Browse files

Fix a problem with invalid auth error detection for LDAP client SDKs that... 

Fix a problem with invalid auth error detection for LDAP client SDKs that don't support LDAP_SECURITY_ERROR macro. PR#39529

Submitted by: [Ray Price <dohrayme yahoo.com>], [Josh Fenlason <jfenlason ptc.com>]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@411306 13f79535-47bb-0310-9956-ffa450edef68
parent cfc87212

modules/aaa/mod_authnz_ldap.c

+9 −0
Changes for modules/aaa/mod_authnz_ldap.c: 9 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -405,6 +405,15 @@ start_over: 
        return (LDAP_NO_SUCH_OBJECT == result) ? AUTH_USER_NOT_FOUND

#ifdef LDAP_SECURITY_ERROR

                 : (LDAP_SECURITY_ERROR(result)) ? AUTH_DENIED

#else

				 : (LDAP_INAPPROPRIATE_AUTH == result) ? AUTH_DENIED

				 : (LDAP_INVALID_CREDENTIALS == result) ? AUTH_DENIED

#ifdef LDAP_INSUFFICIENT_ACCESS

                 : (LDAP_INSUFFICIENT_ACCESS == result) ? AUTH_DENIED

#endif

#ifdef LDAP_INSUFFICIENT_RIGHTS

				 : (LDAP_INSUFFICIENT_RIGHTS == result) ? AUTH_DENIED

#endif

#endif

                 : AUTH_GENERAL_ERROR;

    }