[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#3807) escaping in back-config values



Full_Name: Pierangelo Masarati
Version: HEAD/RE23
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (81.72.89.40)


There's yet another issue with back-config and values that need escaping.

Consider for instance an "authz-regexp" statement that contains chars that need
escaping wrt/ regexes; e.g.:

authz-regexp "^gidnumber=0\\\+uidnumber=0,cn=peercred,cn=external,cn=auth$"
"cn=config"

This gets written in slapd.d/cn=config.ldif as

olcAuthzRegexp: {0}"^gidnumber=0\+uidnumber=0,cn=peercred,cn=external,cn=auth$
 " "cn=config"

Unfortunately, the "\" that escapes the "+" needs to be escaped, in turn, before
the string can be reparsed by the back-config.  This may occur in many different
places.

p.