From f3d4b3e03b1505a539977c86b59ff4aa967580d1 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Sep 29 2014 17:16:45 +0000
Subject: LDAP: Do not require a dereference control to be retuned in a reply


When we attempt to request attributes that are not present in
the dereferenced links, some serves might not send the dereference
control back at all. Be permissive and treat the search as if
it didn't find anything.

Reviewed-by: Pavel Reichl <preichl@redhat.com>

---

diff --git a/src/providers/ldap/sdap_async.c b/src/providers/ldap/sdap_async.c
index a8ea531..8979de4 100644
--- a/src/providers/ldap/sdap_async.c
+++ b/src/providers/ldap/sdap_async.c
@@ -1799,8 +1799,13 @@ static errno_t sdap_x_deref_parse_entry(struct sdap_handle *sh,
     }
 
     if (!ctrls) {
+        /* When we attempt to request attributes that are not present in
+         * the dereferenced links, some serves might not send the dereference
+         * control back at all. Be permissive and treat the search as if
+         * it didn't find anything.
+         */
         DEBUG(SSSDBG_MINOR_FAILURE, "No controls found for entry\n");
-        ret = ENOENT;
+        ret = EOK;
         goto done;
     }