[389-commits] [389-ds-base] branch 389-ds-base-1.4.0 updated: Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"

This is an automated email from the git hooks/post-receive script. tbordaz pushed a commit to branch 389-ds-base-1.4.0 in repository 389-ds-base. The following commit(s) were added to refs/heads/389-ds-base-1.4.0 by this push: new 9349a24 Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request" 9349a24 is described below commit 9349a248369a923591747bb9ded8b35770d24116 Author: Thierry Bordaz <tbordaz(a)redhat.com&gt; AuthorDate: Fri Jun 7 11:35:46 2019 +0200 Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request" Bug Description: When a search request contains invalid parameters (attribute list with empty attribute name, unknown scope, invalid filter..) the search is rejected but the access log contains a wrong base search: ... SRCH base="(null)"... This is because it does not use for logging the variable that gather the actual base ('rawbase') Fix Description: Use 'rawbase' value for logging https://pagure.io/389-ds-base/issue/50428 Reviewed by: Mark Reynolds Platforms tested: F28 Flag Day: no Doc impact: no --- ldap/servers/slapd/search.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ldap/servers/slapd/search.c b/ldap/servers/slapd/search.c index 7e253f5..2a99795 100644 --- a/ldap/servers/slapd/search.c +++ b/ldap/servers/slapd/search.c @@ -154,6 +154,7 @@ do_search(Slapi_PBlock *pb) goto free_and_return; } } + base = rawbase; /* * ignore negative time and size limits since they make no sense -- To stop receiving notification emails like this one, please contact the administrator of this repository.