Return-Path: X-Original-To: apmail-directory-dev-archive@www.apache.org Delivered-To: apmail-directory-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 25B8D18F85 for ; Sat, 19 Dec 2015 12:32:47 +0000 (UTC) Received: (qmail 72225 invoked by uid 500); 19 Dec 2015 12:32:47 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 72169 invoked by uid 500); 19 Dec 2015 12:32:47 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 72154 invoked by uid 99); 19 Dec 2015 12:32:47 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 19 Dec 2015 12:32:47 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 95C342C14F6 for ; Sat, 19 Dec 2015 12:32:46 +0000 (UTC) Date: Sat, 19 Dec 2015 12:32:46 +0000 (UTC) From: "Stefan Seelmann (JIRA)" To: dev@directory.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (DIRSERVER-2109) Apply LDIF with special crafted DN creates two CN attributes MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/DIRSERVER-2109?page=3Dcom.atla= ssian.jira.plugin.system.issuetabpanels:all-tabpanel ] Stefan Seelmann updated DIRSERVER-2109: --------------------------------------- Description:=20 In Studio we have a test that injects an entry with a special crafted DN (c= n starts with #, contains plus, comma, quotes). This entry is injected usin= g the {{@ApplyLdifFiles}} annotation. The injected entry then contains two = CN attributes, one with proper unescaped value, one with still escaped valu= e. Here is the LDIF: {code} # cn=3D\#\\\+\, \"=C3=B6=C3=A9\",ou=3Dusers,ou=3Dsystem dn:: Y249XCNcXFwrXCwgXCLDtsOpXCIsb3U9dXNlcnMsb3U9c3lzdGVt objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top cn:: I1wrLCAiw7bDqSI=3D sn:: I1wrLCAiw7bDqSI=3D givenName:: I1wrLCAiw7bDqSI=3D uid:: I1wrLCAiw7bDqSI=3D {code} Here the sysout of the injected entry with the two CN attributes: {code} dn[n]: cn=3D\#\\\+\, \"=C3=B6=C3=A9\",ou=3Dusers,ou=3Dsystem objectclass: organizationalPerson objectclass: person objectclass: inetOrgPerson objectclass: top givenname: #\+, "=C3=B6=C3=A9" uid: #\+, "=C3=B6=C3=A9" cn: #\+, "=C3=B6=C3=A9" cn: \#\\\+\, \"=C3=B6=C3=A9\" sn: #\+, "=C3=B6=C3=A9" {code} was: In Studio we have a test that injects an entry with a special crafted DN (c= n starts with #, contains plus, comma, quotes). This entry is injected usin= g the {{{@ApplyLdifFiles}}} annotation. The injected entry then contains tw= o CN attributes, one with proper unescaped value, one with still escaped va= lue. Here is the LDIF: {code} # cn=3D\#\\\+\, \"=C3=B6=C3=A9\",ou=3Dusers,ou=3Dsystem dn:: Y249XCNcXFwrXCwgXCLDtsOpXCIsb3U9dXNlcnMsb3U9c3lzdGVt objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person objectClass: top cn:: I1wrLCAiw7bDqSI=3D sn:: I1wrLCAiw7bDqSI=3D givenName:: I1wrLCAiw7bDqSI=3D uid:: I1wrLCAiw7bDqSI=3D {code} Here the sysout of the injected entry with the two CN attributes: {code} dn[n]: cn=3D\#\\\+\, \"=C3=B6=C3=A9\",ou=3Dusers,ou=3Dsystem objectclass: organizationalPerson objectclass: person objectclass: inetOrgPerson objectclass: top givenname: #\+, "=C3=B6=C3=A9" uid: #\+, "=C3=B6=C3=A9" cn: #\+, "=C3=B6=C3=A9" cn: \#\\\+\, \"=C3=B6=C3=A9\" sn: #\+, "=C3=B6=C3=A9" {code} > Apply LDIF with special crafted DN creates two CN attributes > ------------------------------------------------------------ > > Key: DIRSERVER-2109 > URL: https://issues.apache.org/jira/browse/DIRSERVER-2109 > Project: Directory ApacheDS > Issue Type: Bug > Affects Versions: 2.0.0-M21 > Reporter: Stefan Seelmann > > In Studio we have a test that injects an entry with a special crafted DN = (cn starts with #, contains plus, comma, quotes). This entry is injected us= ing the {{@ApplyLdifFiles}} annotation. The injected entry then contains tw= o CN attributes, one with proper unescaped value, one with still escaped va= lue. > Here is the LDIF: > {code} > # cn=3D\#\\\+\, \"=C3=B6=C3=A9\",ou=3Dusers,ou=3Dsystem > dn:: Y249XCNcXFwrXCwgXCLDtsOpXCIsb3U9dXNlcnMsb3U9c3lzdGVt > objectClass: inetOrgPerson > objectClass: organizationalPerson > objectClass: person > objectClass: top > cn:: I1wrLCAiw7bDqSI=3D > sn:: I1wrLCAiw7bDqSI=3D > givenName:: I1wrLCAiw7bDqSI=3D > uid:: I1wrLCAiw7bDqSI=3D > {code} > Here the sysout of the injected entry with the two CN attributes: > {code} > dn[n]: cn=3D\#\\\+\, \"=C3=B6=C3=A9\",ou=3Dusers,ou=3Dsystem > objectclass: organizationalPerson > objectclass: person > objectclass: inetOrgPerson > objectclass: top > givenname: #\+, "=C3=B6=C3=A9" > uid: #\+, "=C3=B6=C3=A9" > cn: #\+, "=C3=B6=C3=A9" > cn: \#\\\+\, \"=C3=B6=C3=A9\" > sn: #\+, "=C3=B6=C3=A9" > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)