[AMBARI-11362] Kerberos: Creating principals in AD when special characters are involved causes failures

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.1.0
• Component/s: ambari-server
• Labels: active-directory active_directory kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 23/May/15 21:31
• Updated: 25/May/15 15:19
• Resolved: 25/May/15 13:45

Description

Creating principals in AD when special characters are involved causes failures.

The following characters in the CN need to be escaped:

/ , \ # + < > ; " =

Note: javax.naming.ldap.Rdn will properly escape relative distinguished name parts.

The following characters in the sAMAccountName need to be removed or replaced:

[ ] : ; | = + * ? < > / \

Note: This needs to be done explicitly within the attributes set if a relevant entry exists.

// Replace the following _illegal_ characters: [ ] : ; | = + * ? < > / \
value = value.toString().replaceAll("\\[|\\]|\\:|\\;|\\||\\=|\\+|\\*|\\?|\\<|\\>|\\/|\\\\", "_");