[SSSD] [PATCHSET] LDAP: sanitize group name when used in filter

Pavel Březina pbrezina at redhat.com
Wed Aug 5 09:34:54 UTC 2015


On 08/04/2015 03:52 PM, Pavel Reichl wrote:
> Hello,
>
> please see 2 simple patches attached.
>
> I could not find function to sanitize DN so it could be used as part of
> filter (sanitize ()*/\...) so I had to write one.
>
>   sysdb_dn_sanitize is not the right choice,
>
> sysdb_dn_sanitize("name=expired-group(2016),cn=groups,cn=LOCAL,cn=sysdb") ->
> "name\\3Dexpired-group(2016)\\,cn\\3Dgroups\\,cn\\3DLOCAL\\,cn\\3Dsysdb"
>
> Thanks!

Hi, I did just a quick read of your patches... can you take one more 
step with creating a sanitized dn and create a more generic function for 
that?

Have you considered to modify sysdb_dn_sanitize to also escape 
parentheses (that's what is misssing, isn't it)?




More information about the sssd-devel mailing list