Bug #62085 for RT-Authen-ExternalAuth: Problem with LDAP.pm when a CN has a comma in it

Mon Jun 29 12:44:14 2009 wtopping [...] sigma-micro.com - Ticket #47439: Ticket created

Subject:	Problem with Active Directory and a comma in the CN name of a user.
Date:	Mon, 29 Jun 2009 12:43:42 -0400
To:	<bug-RT-Authen-ExternalAuth [...] rt.cpan.org>
From:	"Wes Topping" <wtopping [...] sigma-micro.com>

Download image001.gif
image/gif 189b

Download image002.gif
image/gif 3.4k

Download image003.gif
image/gif 2.4k

Download image004.gif
image/gif 185b

Works fine for any user where there is no comma in their container name. Verified password that I am using is correct. It looks like it is trying to use the CN=Mellring, Scott A. on the highlighted line. That would fail due to the comma I think. [Fri Jun 26 20:29:58 2009] [debug]: Found LDAP DN: CN=Mellring\, Scott A.,OU=IS,OU=Users,OU=HQ,DC=starkbrosfulfillment,DC=com (/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAut h/LDAP.pm:75) [Fri Jun 26 20:29:58 2009] [debug]: LDAP Search === Base: DC=starkbrosfulfillment,DC=com == Filter: (member=CN=Mellring, Scott A.,OU=IS,OU=Users,OU=HQ,DC=starkbrosfulfillment,DC=com) == Attrs: dn (/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAut h/LDAP.pm:100) [Fri Jun 26 20:29:58 2009] [info]: My_LDAP AUTH FAILED: smellring (/opt/rt3/local/plugins/RT-Authen-ExternalAuth/lib/RT/Authen/ExternalAut h/LDAP.pm:127) Wes Topping Director of Enterprise Technology 317.713.8687 317.631.6585 fax wtopping@sigma-micro.com <mailto:email@sigma-micro.com> www.sigma-micro.com <http://www.sigma-micro.com/> Sigma Micro LLC, 6720 Parkdale Place, Indianapolis, IN 46254 Confidentiality Notice <http://www.sigma-micro.com/emailconfidentialitynotice.shtml>

Tue Oct 12 14:04:55 2010 MDufour [...] lapresse.ca - Ticket created

Subject:	Problem with LDAP.pm when a CN has a comma in it
Date:	Tue, 12 Oct 2010 18:04:42 +0000
To:	"bug-RT-Authen-ExternalAuth [...] rt.cpan.org" <bug-RT-Authen-ExternalAuth [...] rt.cpan.org>
From:	"Dufour, Marc" <MDufour [...] lapresse.ca>

Hi, I had some problems authenticating to our Active Directory because the user name CN has a comma in it. What I found is that $ldap_dn created on line 74 has the comma escaped correctly, as I have seen in the debug log. The problem is that the backslash has to be escaped also to be able to pass the variable correctly to the filter created on line 98. I just added the following substitution right before the creation of the filter and it fixed my problem. $ldap_dn =~ s/\\/\\\\/g; ----------------------------------------------------------------- Marc Dufour

Mon Sep 19 14:47:27 2011 cpan [...] jibsheet.com - Ticket #47439: Correspondence added

I'm betting this needs a s/,/\\,/ on that CN, or possibly a call into Net::LDAP to ask for escaping

Mon Sep 19 14:47:28 2011 The RT System itself - Ticket #47439: Status changed from 'new' to 'open'

Mon Sep 19 15:17:32 2011 cpan [...] jibsheet.com - Ticket #47439: Merged into ticket #62085

Mon Sep 19 15:17:32 2011 cpan [...] jibsheet.com - Merged into ticket #62085

Mon Jan 23 13:16:33 2012 tsibley [...] cpan.org - Correspondence added

I believe this escaping problem is fixed in the development version of RT- Authen-ExternalAuth 0.09_01 that I just released. Please download it from CPAN and install it to verify that the fix works for you. Thanks, Thomas

Mon Jan 23 13:16:35 2012 The RT System itself - Status changed from 'new' to 'open'

Thu Jan 26 14:12:49 2012 tsibley [...] cpan.org - Status changed from 'open' to 'resolved'

Thu Jan 26 14:12:50 2012 tsibley [...] cpan.org - Fixed in 0.09_01 added