[AMBARI-9637] Kerberos: Escape special characters in Distinguished Names used for queries in Active Directory

• Type: Task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: ambari-server
• Labels: kerberos

Environment

Cluster with Kerberos enabled and using an Active Directory as the KDC

• Epic Link: Ambari Automated Kerberization
• Assignee: Robert Levas
• Reporter: Robert Levas
• Due: 13/Feb/15
• Created: 13/Feb/15 20:42
• Updated: 16/Feb/15 17:41
• Resolved: 16/Feb/15 16:10

Description

Escape special characters in Distinguished Names used for queries in Active Directory, else query (or attribute updates) will fail with an error like

[LDAP: error code 1 - 000020D6: SvcErr: DSID-0310081B, problem 5012 (DIR_ERROR), data 0 ^@]

The following characters should be escaped using a {{}}:

• Forward Slash /
• Comma ,
• Backslash character
• Pound sign (hash sign) #
• Plus sign +
• Less than symbol <
• Greater than symbol >
• Semicolon ;
• Double quote (quotation mark) "
• Equal sign =
• Leading or trailing spaces