Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-3094

ACI syntax: do not allow extra spaces anymore

    XMLWordPrintable

Details

    • Bug
    • Status: Done
    • Major
    • Resolution: Not a defect
    • 3.5.0, 4.0.0
    • 3.5.0, 4.0.0
    • access control
    • None

    Description

      Found with OpenDJ 4.0.0 rev 1aa67b085c51f71b565baece6acfc8845c024641

      We setup a server with some users and try to add some acis.
      One of our test adds extra white spaces in the target filter belonging to the aci.
      It used to be accepted in previous versions but now it throws an error:

      ./aci_group/opendj-inst1/opendj/bin/ldapmodify -h localhost -p 1391 -D "cn=myself" -w password
      dn: ou=aci branch,o=ACI Tests,dc=example,dc=com
      changetype: modify
      add: aci
      aci: (target="ldap:///ou=aci branch,o=ACI Tests,dc=example,dc=com")(targetattr="*")(targetfilter="( & (cn =David Miller)( sn=Miller )( roomnumber = 4135 ))")(version 3.0; acl "add_aci7"; allow (search,read) userdn="ldap:///all";)
      
      returned 21, expected 0
      
      Processing MODIFY request for ou=aci branch,o=ACI Tests,dc=example,dc=com
      MODIFY operation failed
      Result Code:  21 (Invalid Attribute Syntax)
      Additional Information:  When attempting to modify entry ou=aci branch,o=ACI Tests,dc=example,dc=com to add one or more values for attribute aci, value "(target="ldap:///ou=aci branch,o=ACI Tests,dc=example,dc=com")(targetattr="*")(targetfilter="( & (cn =David Miller)( sn=Miller )( roomnumber = 4135 ))")(version 3.0; acl "add_aci7"; allow (search,read) userdn="ldap:///all";)" was found to be invalid according to the associated syntax: The provided Access Control Instruction (ACI) targetfilter expression value "( & (cn =David Miller)( sn=Miller )( roomnumber = 4135 ))" is invalid because it is not a valid LDAP filter
      

      Attachments

        Activity

          People

            JnRouvignac Jean-Noël Rouvignac
            cforel carole forel
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: