[SSSD] [PATCH] Allow ldap_access_filter values wrapped in parentheses

Stephen Gallagher sgallagh at redhat.com
Wed Jun 9 12:35:23 UTC 2010


On 06/07/2010 04:34 AM, Jakub Hrozek wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 06/04/2010 05:14 PM, Stephen Gallagher wrote:
>> On 06/04/2010 10:31 AM, Stephen Gallagher wrote:
>>> Resolves:
>>> https://bugzilla.redhat.com/show_bug.cgi?id=600352
>>>
>>> The openldap libraries fail to parse a search filter that is wrapped
>>> with an extra set of quotes:
>>>
>>> ((&(uidNumber>=1000)(uidNumber<=2000)))
>>>
>>> Internally, we were always wrapping the filter in parentheses (for
>>> safety, I thought), but this causes filters that are wrapped thusly in
>>> the sssd.conf to fail.
>>>
>>> This patch detects whether the supplied filter begins with a parenthesis
>>> and omits adding the additional set.
>>>
>>
>> Amended patch fixes a warning I introduced by using char * instead of
>> const char *
>>
>>
>
> Ack

Pushed to master and sssd-1-2.

-- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/



More information about the sssd-devel mailing list