search

argus-authz / argus-pep-server

Argus PEP Server
5 stars 3 forks source link

Escape quoted slash characters when parsing grid-mapfile #9

Closed enricovianello closed 7 years ago

enricovianello commented 8 years ago

From GGUS Ticket: https://ggus.eu/index.php?mode=ticket_info&ticket_id=120256

Argus DN mapping code does not nicely handle CNs with "internal" slash characters, like in this example:

/DC=ch/DC=cern/OU=computers/CN=cmspilot02/vocms080.cern.ch

Apparently a slash does not necessarily have to be a field separator, but this method assumes just that:

https://github.com/argus-authz/argus-pep-server/blob/EMI-3/src/main/java/org/glite/authz/pep/obligation/dfpmap/X509MatchStrategy.java#L54

We needed to escape such internal slash characters in the grid-mapfile:

"/DC=ch/DC=cern/OU=computers/CN=cmspilot02\\/vocms080.cern.ch" [...]

It would be good if such "hacks" could be avoided.

marcocaberletti commented 7 years ago

Fixed in Argus release 1.7.0