Don't read the user's configuration file if we're running in a setuid

or setgid application.

--- openldap-2.2.13/libraries/libldap/init.c	2004-06-15 11:51:32.000000000 -0400

+++ openldap-2.2.13/libraries/libldap/init.c	2004-06-15 13:42:35.000000000 -0400

@@ -572,10 +572,11 @@

 		if( user != NULL ) {

 			gopts->ldo_def_sasl_authcid = LDAP_STRDUP( user );

 		}

-    }

+	}

 #endif

 	openldap_ldap_init_w_sysconf(LDAP_CONF_FILE);

+	if( ( getuid() == geteuid() ) && ( getgid() == getegid() ) ) {

 	openldap_ldap_init_w_userconf(LDAP_USERRC_FILE);

 	{

@@ -605,4 +606,5 @@

 	}

 	openldap_ldap_init_w_env(gopts, NULL);

+	}

 }