Roberto Polli wrote:
On Thursday 30 July 2009 01:15:00 Rich Megginson wrote:
>> but..is it right that in aclplugin.c the function
>> acl_get_proxyauth_dn( pb, &proxy_dn, &errtext )
>> returns proxy_dn = "" ?
> It is if there is no proxy auth control being sent.
but tcpdump states it's sent...
Without walking through the server with the debugger, it's going to be
difficult to tell what's going on. The function acl_get_proxyauth_dn()
is pretty straightforward - look at the request controls, see if version
1 or version 2 of the proxy auth control was sent, if so, grab the DN
from the control value. There is no obvious place in the code where
acl_get_proxyauth_dn() would be called conditionally (that is, not
called due to some condition). So I'm at a loss to explain how
acl_get_proxyauth_dn() could be called at all, with a valid proxy auth
control containing a non-empty DN value, and return a NULL or empty DN.