From 94ab608bf26d8ef5fb477e6b7de0be679cfb90a1 Mon Sep 17 00:00:00 2001
From: Ludovic Poitou <ludovic.poitou@forgerock.com>
Date: Mon, 02 May 2016 10:05:10 +0000
Subject: [PATCH] Fix for OPENDJ-2976: Allow access log filtering for rootDSE searches. The rootDSE has the empty string for DN. However representing an empty string in dsconfig is troublesome. The fix is to treat the string "" as a special case representing the rootDSE.
---
opendj-server-legacy/src/main/java/org/opends/server/authorization/dseecompat/PatternDN.java | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
diff --git a/opendj-server-legacy/src/main/java/org/opends/server/authorization/dseecompat/PatternDN.java b/opendj-server-legacy/src/main/java/org/opends/server/authorization/dseecompat/PatternDN.java
index 3682a4f..d93fea0 100644
--- a/opendj-server-legacy/src/main/java/org/opends/server/authorization/dseecompat/PatternDN.java
+++ b/opendj-server-legacy/src/main/java/org/opends/server/authorization/dseecompat/PatternDN.java
@@ -279,7 +279,9 @@
}
int length = dnString.length();
- if (length == 0)
+ if (length == 0
+ // Special pattern "" to express rootDSE aka empty DN
+ || "\"\"".equals(dnString))
{
return new PatternDN();
}
--
Gitblit v1.10.0