[krbdev.mit.edu #7296] SVN Commit

[Greg Hudson via RT]

Fix quoting issues in LDAP KDB module

Modify ldap_filter_correct() to quote special characters for DN
strings as well as filters, since it is already used to quote a DN
string in krb5_ldap_name_to_policydn() and there's no harm in
over-quoting.  In krb5_ldap_put_principal(), quote the unparsed
principal name for use in DNs we choose.  In
krb5_ldap_create_password_policy(), use the policy name for the CN of
the policy entry instead of the (possibly quoted) first element of the
DN.

Adapted from a patch by Jim Shi <hanmao_shi at apple.com>.

https://github.com/krb5/krb5/commit/85898e8f1c9e4f5bff70e1ff810519363b262eb4
Author: Greg Hudson <ghudson at mit.edu>
Commit: 85898e8f1c9e4f5bff70e1ff810519363b262eb4
Branch: master
 src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c |   18 ++++--
 src/plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c |   16 +----
 src/plugins/kdb/ldap/libkdb_ldap/ldap_realm.c      |   77 ++++----------------
 src/tests/kdbtest.c                                |   34 +++++----
 src/tests/t_kdb.py                                 |    2 -
 5 files changed, 48 insertions(+), 99 deletions(-)