big pb with reindexing and ldb_dn_casefold_internal

Andrew Bartlett abartlet at
Wed Aug 11 01:04:51 MDT 2010

On Wed, 2010-08-11 at 02:16 +0400, Matthieu Patou wrote:
> Hello andrew and andrew !
> It seems that I found an interesting pb.

> The dn in Frame 1 is (gdb) print *dn
> $125 = {ldb = 0x84e0888, special = false, invalid = false, valid_case = 
> false,
>    linearized = 0x94cea18 "DN=@INDEX:DISPLAYNAME:PATOU, MATTHIEU", 
> ext_linearized = 0x0, casefold = 0x0, comp_num = 0,
>    components = 0x853f178, ext_comp_num = 0, ext_components = 0x0}

Any DN that starts with an @ should be considered special, and therefore
not invalid.  The rest isn't a normal DN, and so should not be checked
against any more rules.  Either that, or the indexing code should
recognise that this isn't going to make a valid DN, and base64 it.
(however, this will break the index, so it's best to make the @ DNs
simply accept more inputs)

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <>

More information about the samba-technical mailing list