Subject: autofs-ldap: does not properly escape ldap lookups
Package: autofs-ldap
Version: 4.1.4-13
Severity: normal

We have /home as an automounter map from LDAP. In /etc/nsswitch.conf:
  automount:      ldap
Output from /usr/lib/autofs/autofs-ldap-auto-master:
  /home ldap:ou=auto.home,ou=automounter,dc=**,dc=**
  /project ldap:ou=auto.project,ou=automounter,dc=**,dc=**
In /etc/default/autofs:
  daemonoptions="--ghost"

This shows a properly populated /home with all users. However when I do:
  % cd /home
  % ls -l | grep 'a\*'
  [empty]
  % ls -ld 'a*'
  drwxr-x--x 99 arthur consul 8192 2008-02-11 12:51 a*/
  [at this point /home/a* is created and /home/arthur is mounted]

In other words lookups of entries inside the automounter map are not
properly escaped. It looks like a search of (cn=a*) is performed instead
of (cn=a\2a). This results in strange enties that appear. This in turn
could confuse other applications.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable'), (60, 'testing'), (50, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.22-3-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages autofs depends on:
ii  libc6                         2.7-6      GNU C Library: Shared libraries
ii  ucf                           2.0020     Update Configuration File: preserv

Versions of packages autofs recommends:
ii  nfs-common             1:1.0.10-6+etch.1 NFS support files common to client

-- 
-- arthur de jong - [EMAIL PROTECTED] - west consulting b.v. --



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to