From f5e30866d1c8fe903fed4f49fee0094e6c1e4372 Mon Sep 17 00:00:00 2001 From: Kevin McCarthy Date: Mon, 20 Aug 2007 14:23:23 -0700 Subject: Escape search input. Search by uid and cn. --- ipa-server/xmlrpc-server/funcs.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipa-server/xmlrpc-server/funcs.py') diff --git a/ipa-server/xmlrpc-server/funcs.py b/ipa-server/xmlrpc-server/funcs.py index 6f7e4e66..82802487 100644 --- a/ipa-server/xmlrpc-server/funcs.py +++ b/ipa-server/xmlrpc-server/funcs.py @@ -346,7 +346,7 @@ class IPAServer: # FIXME: Is this the filter we want or do we want to do searches of # cn as well? Or should the caller pass in the filter? - filter = "(uid=%s)" % criteria + filter = "(|(uid=%s)(cn=%s))" % (criteria, criteria) try: m1 = _LDAPPool.getConn(self.host,self.port,self.bindca,self.bindcert,self.bindkey,dn) results = m1.getList(self.basedn, self.scope, filter, sattrs) -- cgit