big pb with reindexing and ldb_dn_casefold_internal

Andrew Bartlett abartlet at samba.org
Wed Aug 11 01:04:51 MDT 2010


On Wed, 2010-08-11 at 02:16 +0400, Matthieu Patou wrote:
> Hello andrew and andrew !
> 
> It seems that I found an interesting pb.

> The dn in Frame 1 is (gdb) print *dn
> $125 = {ldb = 0x84e0888, special = false, invalid = false, valid_case = 
> false,
>    linearized = 0x94cea18 "DN=@INDEX:DISPLAYNAME:PATOU, MATTHIEU", 
> ext_linearized = 0x0, casefold = 0x0, comp_num = 0,
>    components = 0x853f178, ext_comp_num = 0, ext_components = 0x0}

Any DN that starts with an @ should be considered special, and therefore
not invalid.  The rest isn't a normal DN, and so should not be checked
against any more rules.  Either that, or the indexing code should
recognise that this isn't going to make a valid DN, and base64 it.
(however, this will break the index, so it's best to make the @ DNs
simply accept more inputs)

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100811/e5fbf71a/attachment.pgp>


More information about the samba-technical mailing list