From: Francis Cianfrocca <garbagecat10@...>
Date: 2007-08-24T16:59:49+09:00
Subject: Re: ldap injection

------=_Part_5433_9415149.1187942383115
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 8/23/07, Jeff - Burly Systems <jeff.burly@gmail.com> wrote:
>
> Any issues / advice guarding against ldap injection when doing a
> simple pass/fail ldap auth using Net::LDAP#auth and #bind for
> client-supplied uid and pss?



I'm not clear on what you mean by "ldap injection." Are you having concerns
relating to security?

Look at the Net::LDAP#bind_as function. You can do some of this (not the uid
scrub) in fewer steps.

------=_Part_5433_9415149.1187942383115--