You are viewing a plain text version of this content. The canonical link for it is here.
Posted to infrastructure-issues@apache.org by "Sebb (JIRA)" <ji...@apache.org> on 2015/12/06 13:16:10 UTC

[jira] [Updated] (INFRA-10891) Apache Phone Book - people.lua does not extract some user names

     [ https://issues.apache.org/jira/browse/INFRA-10891?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sebb updated INFRA-10891:
-------------------------
    Status: Waiting for Infra  (was: Closed)

The change has fixed the lua script, however the Javascript check is wrong.

Not all encoded names contain a trailing = [1], and a field can contain '=' without being encoded (highly unlikely for a persons name, but still).

I assume that it's too difficult to add the decoding to the lua script, so there will have to be another way to detect the encodings. The most secure would be for the LUA script to pass back a marker (e.g. it could pass back the entire line). 

Encoded names have no spaces, are always a multiple of 4 characters and are all alphanumeric apart from the last one or two filler characters which are =. 

However there is at least one name that fits those criteria unencoded. 

Admittedly it probably won't decode successfully, but it's not impossible for there to exist a valid cn: which is also a valid cn::.


[1] RW1tYW51ZWwgTMOpY2hhcm55 (elecharny)
There are another 40 such names currently:
cn:: RW1tYW51ZWwgTMOpY2hhcm55
cn:: UmVuw6kgR2llbGVu
cn:: SsO2cmcgUmVpaGVy
cn:: SmVhbi1CYXB0aXN0ZSBPbm9mcsOp
cn:: TWlrZSBNw7xsbGVy
cn:: U3RlZmFuIEvDvG5n
cn:: SGVsZGVyIE1pZ3VlbCBBbHZlcyBNYWdhbGjDo2Vz
cn:: RmxvcmlhbiBNw7xsbGVy
cn:: RGFuaWVsIE7DpHNsdW5k
cn:: xYF1a2FzeiBEeXdpY2tp
cn:: U3phYnkgR3LDvG53YWxk
cn:: V29qY2llY2ggU3RyemHFgmth
cn:: SsOpcsO0bWUgQmVub2lz
cn:: SsOpcsO0bWUgUmVuYXJk
cn:: RnJhbsOnb2lzIEZhY29u
cn:: SmFuIEjDuHlkYWhs
cn:: SsO8cmdlbiBTY2htaWR0
cn:: U8OpdmVuIExlIE1lc2xl
cn:: UGF2ZWwgSmFuw61r
cn:: UGV0ZXIgS2zDvGds
cn:: R8O2a3TDvHJrIEdlemVy
cn:: Q8OpZHJpYyBEYW1pb2xp
cn:: UmVuw6kgTXVsZGVy
cn:: UmlzdG8gSsOkw6Rza2Vsw6RpbmVu
cn:: QW50w7NuIE3DqWl4b21l
cn:: SnVyZSDFvWl0bmlr
cn:: TWF0ZXbFviBCcmFkYcSN
cn:: U3RlZmFuIFJlaWNow7Zy
cn:: VmxhZGlzbGF2IFN0ZXZhbm92acSH
cn:: VGhvcnN0ZW4gU2Now7ZuaW5n
cn:: S2FybCBLaWxkw6lu
cn:: QWxwYXJzbGFuIEF2Y8Sx
cn:: TcOhcnRvbiBCYWxhc3Np
cn:: SnVsacOhbiBHYXJyaWRv
cn:: T3TDoXZpbyBTYW50YW5h
cn:: U2VyZ2lvIFBlw7Fh
cn:: TWFyYyBTY2jDtmNobGlu
cn:: UsOpbWkgTWFyw6ljaGFs
cn:: TWlrYWVsIFN0w6VsZGFs
cn:: T2duamVuIEJsYWdvamV2acSH


> Apache Phone Book - people.lua does not extract some user names
> ---------------------------------------------------------------
>
>                 Key: INFRA-10891
>                 URL: https://issues.apache.org/jira/browse/INFRA-10891
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Website
>            Reporter: Sebb
>            Assignee: Daniel Gruno
>
> The people.lua script fails to extract encoded names, for example those for 'nd' and 'lehmi'
> dn: uid=nd,ou=people,dc=apache,dc=org
> cn:: QW5kcsOpIE1hbG8=
> dn: uid=lehmi,ou=people,dc=apache,dc=org
> cn:: QW5kcmVhcyBMZWhta8O8aGxlcg==



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)