[pve-devel] [PATCH access-control 1/1] fix #4609: allow valid DN in ldap/ad realm config

[Friedrich Weber]

Tested-by: Friedrich Weber <f.weber at proxmox.com>

Tested the following:

* PVE 7.3: setup LDAP realms
  realm #1 with `base_dn ou=Foo- und Bar,dc=example,dc=com`
  realm #2 with `base_dn ou=Users,dc=example,dc=com`
  both work, i.e., sync is possible and users can log in
* Update to 7.4:
  realm #1: users cannot login ("value does not match the regex pattern")
  realm #2: still works
* With this patch:
  realm #1: login works again
  realm #2: still works

On 23/03/2023 14:14, Dominik Csapak wrote:
> we previously added support for ',' in the dns attribute by allowing a
> quoted format. the regex was sadly too restrictive: