[INFRA-21590] Incorrect UID validation

• Type: Bug
• Status: For Review
• Priority: Trivial
• Resolution: Unresolved
• Component/s: LDAP
• Environment: https://svn.apache.org/repos/infra/infrastructure/trunk/projects/asfpy/asfpy/ldap.py
• Project: Infrastructure
• Assignee: Unassigned
• Reporter: Sebb
• Created: 16/Mar/21 17:33
• Updated: 26/Mar/21 09:13

Description

The asfpy.ldap module incorrectly allows '-' in new UIDs.

Whilst this is valid as an LDAP name or host login name, hyphens can cause issues with email suffices.

For example, is [e-mail] an email intended for the user abc-def or is it intended for the user abc who decided to use the suffix -def?