kdc ldap plugin code

[Philip Guenther]

On Tue, Sep 11, 2012 at 10:44 AM, Greg Hudson <ghudson at mit.edu> wrote:
> I see.  I think ldap_filter_correct() was originally designed to be used
> only for filter strings, but it is already used in one place for DN
> strings (and would be used that way in a second place after your patch),
> so we can just add a comment that it works for both.  It's not harmful
> to quote characters that don't need to be quoted, and filter strings and
> DN strings both accept %XX quoting.

I hope you meant to say "\XX" quoting.  :-)

Also, the list of characters that need to be escaped for DNs is more
than what Jim Shi mentioned.  A leading or trailing space character
also needs to be escaped, as do all double-quotes, less-than-signs,
and greater-than-signs.


Philip Guenther