UserDN escape problem and Group membership checking in 3.0.3

Winders, Timothy A twinders at southplainscollege.edu
Fri Nov 21 15:11:17 CET 2014


On 11/20/14, 5:04 PM, "Arran Cudbard-Bell" <a.cudbardb at freeradius.org>
wrote:


>>(27) Group name is "Students Security Group"
>> (27) User found. Comparison between membership: name (resolved from DN),
>> check: name
>> rlm_ldap (ldap): Released connection (7)
>
>Excellent.
>
>I've pushed a fix for the escaping/normalisation issue as well.
>
>If you do a group check for:
>
>cn=group\2c bar,ou=example,ou=org
>
>the code will convert it to
>
>cn=group\, bar, ou=example,ou=org
>
>and likewise if the directory returns:
>
>cn=group\2c bar,ou=example,ou=org
>
>it'll be converted to
>
>cn=group\, bar, ou=example,ou=org
>
>before comparison.


Most excellent!  Will this be in the 3.0.5 release or part of the 3.0.6
code?


-- 
Tim Winders

Associate Dean of Information Technology
South Plains College
(806) 716-2369



>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5856 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20141121/0835a812/attachment.bin>


More information about the Freeradius-Users mailing list