Bug(s) fixed: 202872
Bug Description: The current behavior of the Directory Server is to only
allow the password
modify extended operation when the connection is using SSL or TLS.
attempt to use a connection that is not using SSL or TLS, the server
We should allow the password modify extended operation if the
using a SASL security layer that has privacy.
Reviewed by: ???
Files: See diffs
Fix Description: I added a new internal function "int
*conn)" that will check if a SASL security layer supporting privacy
negotiated for a particular connection. This function uses the
function to check the SSF (security strength factor) to see if
privacy has been
This function allows us to have the password modify extop code check
is enabled so it can allow the operation to be processed. The new
behavior is to allow the password modify extended operation if using
or a SASL privacy layer. All other attempts will return
Platforms tested: RHEL4
Flag Day: no
Doc impact: no