Commit 3f592f47 authored by Bradley Nicholes's avatar Bradley Nicholes
Browse files

If the entry has a password then don't allow util_ldap_cache_getuserdn() to... 

If the entry has a password then don't allow util_ldap_cache_getuserdn() to update the expiration timeout since it has no idea when the password was last validated.

Submitted by: Jari Ahonen [jah progress.com]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105681 13f79535-47bb-0310-9956-ffa450edef68
parent f2ef1c9e

modules/ldap/util_ldap.c

+6 −1
Original line number Diff line number Diff line
@@ -1096,7 +1096,12 @@ start_over: 
            /* Nothing in cache, insert new entry */

            util_ald_cache_insert(curl->search_cache, &the_search_node);

        }

        else {

        /*

         * Don't update lastbind on entries with bindpw because

         * we haven't verified that password. It's OK to update

         * the entry if there is no password in it.

         */

        else if (!search_nodep->bindpw) {

            /* Cache entry is valid, update lastbind */

            search_nodep->lastbind = the_search_node.lastbind;

        }