Project

General

Profile

Actions

Bug #13777

closed

LDAP filter 255 character limit

Added by Anonymous about 8 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Authentication
Target version:
-
Difficulty:
easy
Triaged:
Fixed in Releases:
Found in Releases:

Description

In my environment, Active Directory is a sprawling mess of nested directory after nested directory. Security groups are created in nested folders for a division leading to a single LDAP filter line >150 characters. Tying two or more LDAP filters together results in a filter hundreds of characters long.

| Started PUT "/auth_source_ldaps/5-Active%20Directory" for 139.126.210.241 at 2016-02-17 13:32:21 -0600
2016-02-17 13:32:21 [app] [I] Processing by AuthSourceLdapsController#update as */*
2016-02-17 13:32:21 [app] [I] Parameters: {"utf8"=>"✓", "authenticity_token"=>"[FILTERED]", "auth_source_ldap"=>{"name"=>"Active Directory", "host"=>"[FILTERED]", "tls"=>"1", "port"=>"636", "server_type"=>"active_directory", "account"=>"[FILTERED]", "account_password"=>"[FILTERED]", "base_dn"=>"[FILTERED]", "groups_base"=>"", "ldap_filter"=>"(|(memberOf=CN=<SOME_LONG_MESS_OF_CHARACTERS_GREATER_THAN_150_CHARACTERS>)(memberOf=CN=<SOME_OTHER_HUGE_FILTER_STRING_GREATER_THAN_150_CHARACTERS>))", "onthefly_register"=>"0", "usergroup_sync"=>"0", "attr_login"=>"sAMAccountName", "attr_firstname"=>"", "attr_lastname"=>"", "attr_mail"=>"", "attr_photo"=>""}, "id"=>"5-Active Directory"}
2016-02-17 13:32:21 [app] [I] Failed to save: Ldap filter is too long (maximum is 255 characters)
2016-02-17 13:32:21 [app] [I] Rendered auth_source_ldaps/_form.html.erb (19.3ms)
2016-02-17 13:32:21 [app] [I] Rendered auth_source_ldaps/edit.html.erb (21.1ms)
2016-02-17 13:32:21 [app] [I] Completed 200 OK in 50ms (Views: 26.0ms | ActiveRecord: 1.1ms)

Actions #1

Updated by Dominic Cleal about 8 years ago

  • Category set to Authentication
  • Difficulty set to easy
Actions #2

Updated by Daniel Lobato Garcia about 8 years ago

I'd also suggest this filter to be a textarea field rather than a 1-line text field - it can very easily get unwieldy to modify

Actions #3

Updated by Abhijeet Kasurde about 7 years ago

I would like to work on this issue. Can any one assign this bug to my name ?

Actions #4

Updated by Walden Raines over 6 years ago

  • Assignee set to Liza Gilman
  • Target version set to 243
Actions #6

Updated by Liza Gilman over 6 years ago

  • Status changed from New to Closed
Actions

Also available in: Atom PDF