https://bz.apache.org/bugzilla/show_bug.cgi?id=65373

--- Comment #10 from Mark Thomas <ma...@apache.org> ---
I've just added this exact example to the Tomcat test cases and it passes.
https://github.com/apache/tomcat/commit/356c8ecc

I'll note that you need to be VERY careful setting up these tests to ensure
that values are correctly escaped and that escapes are applied in the correct
order.

I'll also note that not all LDAP servers seem to follow all of the requirements
of RFC 2254 and RFC 4514.

To summarise the escaping requirements:

Original String:                <>+="#;,rrr
Original + Java escapes:        <>+=\"#;,rrr
Original + LDAP escapes:        \3C\3E\2B=\22#\3B\2Crrr
Original + LDAP + Java escapes: \\3C\\3E\\2B=\\22#\\3B\\2Crrr

I haven't yet seen anything to confirm that there is a Tomcat bug here.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to