[INFRA-21590] Incorrect UID validation

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Component/s: LDAP
• Environment: https://svn.apache.org/repos/infra/infrastructure/trunk/projects/asfpy/asfpy/ldap.py
• Project: Infrastructure
• Assignee: Chris Thistlethwaite
• Reporter: Sebb
• Created: 16/Mar/21 17:33
• Updated: 26/Aug/21 14:25
• Resolved: 26/Aug/21 14:25
• Review Date: 19/Aug/21

Description

The asfpy.ldap module incorrectly allows '-' in new UIDs.

Whilst this is valid as an LDAP name or host login name, hyphens can cause issues with email suffices.

For example, is [e-mail] an email intended for the user abc-def or is it intended for the user abc who decided to use the suffix -def?