[SSSD] [PATCH] SSSD fails to store users if any of the requested attribute is empty.

Jakub Hrozek jhrozek at redhat.com
Thu Sep 20 18:28:25 UTC 2012


On Thu, Sep 20, 2012 at 02:27:03PM +0200, Michal Židek wrote:
> https://fedorahosted.org/sssd/ticket/1440
> 
> Looks like some LDAP servers are able to store empty attribute
> values. For some servers it results in syntax error, so it is
> probably a rare case (if not an error) to have such values. LDB
> seems to be unable to handle such values too, so in this patch we
> skip empty values and do not store them to local cache.
> 
> Patch is attached.
> 
> Thanks
> Michal

I double checked this scenario with Rich.

Technically an "empty" value could have been legal for cases where the string
was an octet string with a single zero byte. Treating such attribute as
if it was missing is probably the right thing to do. For the objects
we care about, this value is possible only with old server that don't do
syntaxt validation.

Ack!



More information about the sssd-devel mailing list