IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-25 00:20:04 -06:00
Code Issues Packages Projects Releases Wiki Activity

Escape LDAP characters in member and memberof searches

Browse Source 
https://fedorahosted.org/freeipa/ticket/1140
This commit is contained in:
Jr Aquino 2011-03-30 15:14:57 -07:00 committed by Rob Crittenden
parent b3a85890ef
commit 463d7d2fe8
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ipaserver/plugins/ldap2.py
View File

@ -913,7 +913,8 @@ class ldap2(CrudBackend, Encoder):
if membertype not in [MEMBERS_ALL, MEMBERS_DIRECT, MEMBERS_INDIRECT]:
return None
searchfilter = "(memberof=%s)" % group_dn
search_group_dn = _ldap_filter.escape_filter_chars(group_dn)
searchfilter = "(memberof=%s)" % search_group_dn
attr_list.append("member")
@ -975,9 +976,10 @@ class ldap2(CrudBackend, Encoder):
if len(memberof) == 0:
return ([], [])
search_entry_dn = _ldap_filter.escape_filter_chars(entry_dn)
attr_list = ["dn", "memberof"]
searchfilter = "(|(member=%s)(memberhost=%s)(memberuser=%s))" % (
entry_dn, entry_dn, entry_dn)
search_entry_dn, search_entry_dn, search_entry_dn)
# We have to do three searches because netgroups and pbac are not
# within the accounts container.