[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: disabling the wildcard in queries



Hello again!

Just realized - it also could be a problem with client library you use, or
even your code - whether you provide malicious string representation of
filter, or the library misinterprets it... On-wire representation of filter
is free of this kind of problem, if I remember RFC right, so most probably
this is not server-side problem...

----- Original Message -----
From: "Dmitry Kovalev" <mitya@seismic.ru>
To: "Oliver Eales" <jester@germany.net>
Cc: <openldap-software@openldap.org>
Sent: Monday, June 25, 2001 8:18 PM
Subject: Re: disabling the wildcard in queries


> Hello, Olivier!
>
> Well, as far as I can understand, this appears to be a problem in frontend
> code, which interprets your '*' s as wildcard symbols, where it has enough
> knowledge to interpret it right. Back-sql simply uses internal
> representation of search filters, not attempting to interpret any symbols.
> To check if I'm right, you could inspect bask-sql's logs at level 5 - it
> should be clear from messages, what flter representation did back-sql
> receive... If I'm right - then you should draw attention of frontend
people
> to this issue. I believe this is best done by not mentioning SQL anywhere
in
> your letter ;)
>
> WBW, Dmitry
>
> ----- Original Message -----
> From: "Oliver Eales" <jester@germany.net>
> To: <openldap-software@OpenLDAP.org>
> Sent: Monday, June 25, 2001 7:52 PM
> Subject: disabling the wildcard in queries
>
>
> > Hello!
> >
> > One question:
> >
> > I am using OpenLdap 2.0.11 with the MySql Backend. Everything works
fine,
> > but i have the problem of looking up users with an asterix in ther
> > rfc822Mailbox address. E.g. peter*a@web.com
> >
> > I want an exact search for this name including the * (asterix), not an
> > wildcard search.
> > How can i set this at the server.
> >
> > Bye, Oli Eales
> > germany.net Technik
>