Forum GLPI-Project

tomolimo

Member

From: Grenoble, France

Registered: 2009-05-12

Posts: 517

LDAP user import will raise error when a '<' or '>' is present in DN

Hello

We've got new ressources in AD, and they are classified as users, so they are not filtered out by the LDAP connection filter.
Example:

CN=\<FR-Room-Grenoble Les Ecuries,OU=RAYNET Generic Mailboxes,OU=Berriat,OU=User,OU=ARaymond France,DC=fr,DC=ray,DC=group

This will lead to warnings during LDAP mass import due to the AuthLDAP::get_entries_clean() function which get ldap entries and clean them with Toolbox::clean_cross_side_scripting_deep() function call.
And this function will replace the '<' by '&lt;', and this leads to errors when using the converted DN in the next function calls.
Translated DN:

CN=\&lt;FR-Room-Grenoble Les Ecuries,OU=RAYNET Generic Mailboxes,OU=Berriat,OU=User,OU=ARaymond France,DC=fr,DC=ray,DC=group

Currently running GLPI 0.83.8, but I checked with 0.85.4, and this behaviours is still present.

Could you fix this?

thank you,
regards,
Tomolio

Last edited by tomolimo (2015-06-09 10:12:15)

---

GLPI 9.5.5 - PHP 7.4 / ProcessMaker 3.3.0-community - PHP 7.1 / Windows 2016 / IIS  / MySQL 5.7
Worldwide: >17k Computers, >17k Users (16 languages, >11 timezones), >610k tickets, >6700 entities, >7600 Groups, >20700 process cases
Raynet is ARaymond (https://www.araymond.com) IT service management