Public bug reported:
If the user_tree_dn is set to something like cn=foo)bar and enabled emulation
is enabled, the filter that's used to find the user in the enabled emulation
entry is invalid. The filter will be like "(member=cn=user_id,cn=foo)bar)",
which is invalid since the ) in foo)bar terminates the () in the filter. The )
needs to be escaped when used in a filter.
I assume an exception would be raised so user operations (like getting a
token) would result in a 500.
While it's unlikely that anybody would actually configure their system
this way, might as well fix it.
** Affects: keystone
Importance: Undecided
Assignee: Brant Knudson (blk-u)
Status: New
** Changed in: keystone
Assignee: (unassigned) => Brant Knudson (blk-u)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1532345
Title:
enabled emulation query must filter tree dn
Status in OpenStack Identity (keystone):
New
Bug description:
If the user_tree_dn is set to something like cn=foo)bar and enabled emulation
is enabled, the filter that's used to find the user in the enabled emulation
entry is invalid. The filter will be like "(member=cn=user_id,cn=foo)bar)",
which is invalid since the ) in foo)bar terminates the () in the filter. The )
needs to be escaped when used in a filter.
I assume an exception would be raised so user operations (like getting
a token) would result in a 500.
While it's unlikely that anybody would actually configure their system
this way, might as well fix it.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1532345/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
