Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6916202

More cases of invalid ldap filters accepted and processed

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P3
    • 7
    • 6u17-rev
    • core-libs
    • None
    • b86
    • generic
    • generic

    Backports

      Description

        Ldap filters indentified as invalid by RFC: http://tools.ietf.org/html/rfc4515 are accepted and processd. The JDK ldap code should throw an exception when such invalid filters are encountered, instead of processing and passing the ldap request to the LDAP servers which always throw an exception. Following are examples of invalid filters:

        1. "((objectClass=*)&(uid=*))"
        2. &(objectClass=*)(uid=*)
        3. ((objectCategory=person)(objectClass=user)(!(cn=user1*)))
        4. ((&(objectClass=user)(cn=andy*)(cn=steve*)(cn=margaret*)))

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-2188248 More cases of invalid ldap filters accepted and processed

            • P3 - Major loss of function.
            • Resolved
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-6979376 to have ldap filters tolerate underscore character in object identifier

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-6972409 Cease emitting LDAP filter debug messages

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-6449574 Invalid ldap filter is accepted and processed

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-6979700 tighten the attribute sytax check for JNDI/LDAPFrom the reporter

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed

            Activity

              People

                xuelei Xuelei Fan
                aperumai Asok Perumainar (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: