Bug 38853 - Warn "univention-ldapsearch -x"
Warn "univention-ldapsearch -x"
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: ucslint
UCS 4.0
Other Linux
: P5 normal (vote)
: UCS 4.1-2-errata
Assigned To: Philipp Hahn
Florian Best
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-07-08 08:50 CEST by Philipp Hahn
Modified: 2016-09-22 18:24 CEST (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
Current occurances (10.85 KB, text/plain)
2015-07-08 08:50 CEST, Philipp Hahn
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2015-07-08 08:50:15 CEST
Created attachment 7008 [details]
Current occurances

"-x" is used to a force LDAP simple bind, which is an internal detail of what "univention-ldapsearch" currently implements.
"ucslint should warn about passing '-x' to the wrapper.
Comment 1 Philipp Hahn univentionstaff 2016-06-17 15:25:24 CEST
r70322 | Bug #38853 ucslint: Check for univention-ldapsearch -x

Package: ucslint
Version: 5.0.3-5.79.201606171517
Branch: ucs_4.1-0
Scope: errata4.1-2

r70324 | Bug #41603,Bug #38853,Bug #34253: ucslint YAML
 ucslint.yaml
Comment 2 Florian Best univentionstaff 2016-06-21 13:53:05 CEST
OK: fix detects:
univention-ldapsearch -x
univention-ldapsearch -LLLx
univention-ldapsearch -LxLL
univention-ldapsearch \
 -x

OK: YAML
Comment 3 Janek Walkenhorst univentionstaff 2016-06-22 14:21:40 CEST
<http://errata.software-univention.de/ucs/4.1/204.html>
Comment 4 Florian Best univentionstaff 2016-09-22 18:24:05 CEST
Fix detects wrong:
univention-ldapsearch -LLLofoox=yes

But I think this will never happen, at least i don't know any option with "x" :)