[SSSD] [PATCHSET] LDAP: sanitize group name when used in filter

Pavel Reichl preichl at redhat.com
Tue Aug 4 13:52:30 UTC 2015


Hello,

please see 2 simple patches attached.

I could not find function to sanitize DN so it could be used as part of 
filter (sanitize ()*/\...) so I had to write one.

  sysdb_dn_sanitize is not the right choice,

sysdb_dn_sanitize("name=expired-group(2016),cn=groups,cn=LOCAL,cn=sysdb") -> 
"name\\3Dexpired-group(2016)\\,cn\\3Dgroups\\,cn\\3DLOCAL\\,cn\\3Dsysdb"

Thanks!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-LDAP-sanitize-group-name-when-used-in-filter.patch
Type: text/x-patch
Size: 15449 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150804/e15e1fd2/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-LDAP-minor-improvements-in-ldap-id-cleanup.patch
Type: text/x-patch
Size: 1891 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150804/e15e1fd2/attachment-0001.bin>


More information about the sssd-devel mailing list