[Issue 10475] slapo-constraint URI mode fails to escape assertion values in internal catalog filters, enabling wildcard/filter-metachar allowlist bypass - openldap-bugs

31 Mar 2026


      https://bugs.openldap.org/show_bug.cgi?id=10475
--- Comment #3 from Ondřej Kuzník ondra@mistotebe.net ---
On Tue, Mar 31, 2026 at 02:15:26PM +0000, openldap-its@openldap.org wrote:
...
slapo-constraint is not a security control mechanism, it is a value control
mechanism. ACLs are used to control access.
There is no issue here.
If as they report, the overlay mistakenly allows one to store values not
listed in the appropriate entry, it's still a valid issue.
-- 
You are receiving this mail because:
You are on the CC list for the issue.