Rudder

Since 2.4 is not maintained anymore, retargeting to branch 2.6

There is a better in Rudder 2.10, but some uses are still unquotted.

All uses of LDAP_PASSWORD variable in rudder-upgrade come from this one line:

LDAP_PARAMETERS="-H ldap://${LDAP_SERVER}:${LDAP_PORT}/ -D ${LDAP_USER} -w ${LDAP_PASSWORD} -x" 

The shell automatically quotes any special characters in this, as shown here:

# grep root /opt/rudder/etc/openldap/slapd.conf
rootdn        "cn=Manager,cn=rudder-configuration" 
rootpw        a!ca*d?085e3

# bash -x /opt/rudder/bin/rudder-upgrade
...
ldapsearch -H ldap://localhost:389/ -D cn=manager,cn=rudder-configuration -w 'a!ca*d?085e3' -x -LLL -b cn=rudder-configuration -s base dn

This does not work, however, if the password contains a single quote, for obvious reasons. Apart from that, all characters seem to be just fine. I think that is good enough, so I'm closing this ticket.

Note: rudder-inventory-endpoint-upgrade does not use LDAP.