Pound sign '#' gets translated incorrectly for LDAP command
search cancel

Pound sign '#' gets translated incorrectly for LDAP command

book

Article ID: 95312

calendar_today

Updated On:

Products

Top Secret Top Secret - LDAP

Issue/Introduction

Pound sign '#' gets translated incorrectly for LDAP command.

If an LDAP command contains a # it may get translated incorrectly.

 

Environment

Release:
Component: TSSLDP

Resolution

The issue is there on tssprofile where the pound sign ( # ) is translating incorrectly. 

r15.1
tssprofile=\23SECURTY,tssadmingrp=profiles,host=ldap,o=ABC Company,c=
tssprofile=\23TSO,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us


r12:
tssprofile=#SECURTY,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=#TSO,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us

As you can see below, with LDAP r15.1, the pound sign ( # ) got translate into something else. 


Running 64-bit PowerShell
Running 32-bit PowerShell


objectClass
tssacid
name
JOSEPH R TESTER
tssacid
JOETEST
User-Type
SCA
AcidRecordSize
1024
Created-Date
07/07/16
Modified-Date
03/31/18
Modified-Time
09:01
Created-Time
10:41
memberOf
tssprofile=&PSSEC,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=\23SECURTY,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=CICSP201,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=\23TSO,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=WEMPL,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=WCORP,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=$ICSFKEY,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
tssprofile=&ISALL,tssadmingrp=profiles,host=ldap,o=ABC Company,c=us
groupmemberOf
tssgroup=OUSRGRP,tssadmingrp=groups,host=ldap,o=ABC Company,c=us
DUF-Extract
Y
LDAPUser

Found this write up on the internet:


•If a value starts with the octothorpe character (#), then that character needs to be escaped as either "\#" or "\23". Note that any occurrence of the octothorpe character that is not the first character of the value does not need to be escaped (but it would be legal to escape it anyway).