File httpd-2.4.10-LDAP_authz_failures.patch of Package apache2.10087
From 5638f5eb571b69068e1c8f1e7a5075cf0fdb7ad0 Mon Sep 17 00:00:00 2001
From: Eric Covener <covener@apache.org>
Date: Sat, 11 Oct 2014 21:18:45 +0000
Subject: [PATCH] Merge r1613682 from trunk:
In 2.4.10, AuthLDAPBindDN might not be used for some LDAP searches, causing
LDAP authz failures if AuthLDAPBindDN was able to search through more of
LDAP than web users.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1631119 13f79535-47bb-0310-9956-ffa450edef68
---
CHANGES | 4 ++++
STATUS | 6 ------
modules/ldap/util_ldap.c | 2 +-
3 files changed, 5 insertions(+), 7 deletions(-)
Index: httpd-2.4.10/modules/ldap/util_ldap.c
===================================================================
--- httpd-2.4.10.orig/modules/ldap/util_ldap.c
+++ httpd-2.4.10/modules/ldap/util_ldap.c
@@ -1824,7 +1824,7 @@ start_over:
* combination, which might be reused unintentionally next time this
* connection is used from the connection pool.
*/
- ldc->must_rebind = 0;
+ ldc->must_rebind = 1;
ap_log_rerror(APLOG_MARK, APLOG_TRACE5, 0, r, "LDC %pp used for authn, must be rebound", ldc);
}