Forum GLPI-Project

tomolimo

Member

From: Grenoble, France

Registered: 2009-05-12

Posts: 515

LDAP user import will raise error when a '<' or '>' is present in DN

Hello

We've got new ressources in AD, and they are classified as users, so they are not filtered out by the LDAP connection filter.
Example:

CN=\<FR-Room-Grenoble Les Ecuries,OU=RAYNET Generic Mailboxes,OU=Berriat,OU=User,OU=ARaymond France,DC=fr,DC=ray,DC=group

This will lead to warnings during LDAP mass import due to the AuthLDAP::get_entries_clean() function which get ldap entries and clean them with Toolbox::clean_cross_side_scripting_deep() function call.
And this function will replace the '<' by '&lt;', and this leads to errors when using the converted DN in the next function calls.
Translated DN:

CN=\&lt;FR-Room-Grenoble Les Ecuries,OU=RAYNET Generic Mailboxes,OU=Berriat,OU=User,OU=ARaymond France,DC=fr,DC=ray,DC=group

Currently running GLPI 0.83.8, but I checked with 0.85.4, and this behaviours is still present.

Could you fix this?

thank you,
regards,
Tomolio

Last edited by tomolimo (2015-06-09 10:12:15)

---

GLPI 9.2.4 - PHP 7.2.13 x64 / ProcessMaker 3.3.0-community-RE-1.7 - PHP 7.1.24 x64 / Windows 2012 x64 / IIS 8.5 / MySQL 5.7.17 x64
Worldwide: >12316 PC, >9400 users (16 languages, >11 timezones), >360k tickets, >3600 entities, >4200 groups
Raynet is ARaymond (http://www.araymond.com) IT service management