From 18aceae62022cec640edd63004170a0488d45c3b Mon Sep 17 00:00:00 2001 From: Taran Pelkey Date: Thu, 24 Apr 2025 14:14:00 -0400 Subject: [PATCH] Fix nil dereference in adding service account (#21235) Fixes #21234 --- cmd/admin-handlers-users.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/admin-handlers-users.go b/cmd/admin-handlers-users.go index 43f3d36c1..43345fe1d 100644 --- a/cmd/admin-handlers-users.go +++ b/cmd/admin-handlers-users.go @@ -2959,7 +2959,7 @@ func commonAddServiceAccount(r *http.Request, ldap bool) (context.Context, auth. denyOnly := (targetUser == cred.AccessKey || targetUser == cred.ParentUser) if ldap && !denyOnly { res, _ := globalIAMSys.LDAPConfig.GetValidatedDNForUsername(targetUser) - if res.NormDN == cred.ParentUser { + if res != nil && res.NormDN == cred.ParentUser { denyOnly = true } }