Github user mike-jumper commented on a diff in the pull request:

    https://github.com/apache/guacamole-client/pull/308#discussion_r206399226
  
    --- Diff: 
extensions/guacamole-auth-ldap/src/main/java/org/apache/guacamole/auth/ldap/connection/ConnectionService.java
 ---
    @@ -257,7 +260,10 @@ private String getConnectionSearchFilter(String userDN,
                 LDAPSearchResults userRoleGroupResults = ldapConnection.search(
                     groupBaseDN,
                     LDAPConnection.SCOPE_SUB,
    -                "(&(!(objectClass=guacConfigGroup))(member=" + 
escapingService.escapeLDAPSearchFilter(userDN) + "))",
    +                "(&(!(objectClass=guacConfigGroup))(" 
    +                        + confService.getMemberAttribute() 
    --- End diff --
    
    This will need to be escaped with 
`escapingService.escapeLDAPSearchFilter()`, as well.


---

Reply via email to