fix krb5_ldap_iterate to handle NULL match_expr and open_db_and_mkey to use KRB5_KDB_...
authorWill Fiveash <will.fiveash@oracle.com>
Mon, 23 Oct 2006 21:36:46 +0000 (21:36 +0000)
committerWill Fiveash <will.fiveash@oracle.com>
Mon, 23 Oct 2006 21:36:46 +0000 (21:36 +0000)
commitafe2c2095973be9ae22c12bb5ed79f52effb9df5
tree0f495c1c4a4b3ebe03b89ccbfc0a96737b74f831
parent5fd3d2b196ce242c4ffff1b6c836aa5a248378d3
fix krb5_ldap_iterate to handle NULL match_expr and open_db_and_mkey to use KRB5_KDB_SRV_TYPE_ADMIN

When I ran kdb5_util dump I had two initial problems.  First, the LDAP
plugin was not finding the bind DN because open_db_and_mkey() was
passing KRB5_KDB_SRV_TYPE_OTHER to krb5_db_open().  When I change this
to KRB5_KDB_SRV_TYPE_ADMIN then the ldap_kadmind_dn parameter is used
from krb5.conf and a valid bind DN is found.  Second,
krb5_ldap_iterate() will core dump when it is called withy a NULL
match_expr arg.  This is how dump_db calls krb5_db_iterate().  I updated
krb5_ldap_iterate() to use a default_match_expr of "*" if match_expr ==
NULL.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18736 dc483132-0cff-0310-8789-dd5450dbe970
src/kadmin/dbutil/kdb5_util.c
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c