Vote #63854: LDAP Filter can't have spaces - redmineorg-copy202205 - Redmine

編集操作

リンクをコピー

Vote #63854

完了

LDAP Filter can't have spaces

Admin Redmine さんが4年以上前に追加. 4年以上前に更新.

ステータス:

Closed

優先度:

通常

担当者:

カテゴリ:

Administration_8

対象バージョン:

0.8_2

開始日:

2008/09/11

期日:

進捗率:

予定工数:

Redmineorg_URL:

https://www.redmine.org/issues/1890

category_id:

version_id:

issue_org_id:

1890

author_id:

2095

assigned_to_id:

comments:

status_id:

tracker_id:

plus1:

affected_version:

closed_on:

affected_version_id:

ステータス-->[Closed]

引用

説明

ruby-net-ldap doesn't like the ldap filter to contain spaces. The input for LDAP attributes should be check for this and other requirements if necessary. The ldap search function fails silently if there is a space.

Ex. (which happened to me)

I copied and pasted the sAMAccountName attribute into the login field, I didn't notice but I grabbed the space at the end also. I couldn't get LDAP auth to work b/c the filter was set to "sAMAccountName =ryan.gibbons" . Even a simple .trim() fucntion would fix this (not sure if ruby has that), but I think check the input for invalid LDAP filter characters wouldn't be a bad thing.

I am running r1784 from svn.

journals

Attribute names are now stripped (r1894).

> I think check the input for invalid LDAP filter characters wouldn't be a bad thing

I agree but I'm not sure what characters should be allowed. Maybe @/^[a-zA-Z0-9\-]+$/@ ?

--------------------------------------------------------------------------------
Fill a request for LDAP attribute validation if needed.
--------------------------------------------------------------------------------