Skip to content

Message about invalid credentials with "{}" in config #758

@saimikiry

Description

@saimikiry

Hi! For some reason, when using the "something{something_else}" construct in "roles/names", I get an error about invalid credentials.

ldap2pg.yml

Good config:

version: 6

postgres:
  databases_query: [postgres]

privileges:
  ro:
  - __connect__
  - __select_on_tables__
  - __select_on_sequences__
  - __usage_on_schemas__
  - __usage_on_types__

  rw:
  - __temporary__
  - __all_on_tables__
  - __all_on_sequences__

  ddl:
  - __create_on_schemas__

rules:
- description: "..."
  ldapsearch:
    base: cn=admin,dc=test,dc=com
    filter: ""

- description: "Setup static roles and grants."
  roles:
  - names:
    - readers
    options: NOLOGIN
  - name: writers
    parent: readers
    options: NOLOGIN
  - name: owners
    parent: writers
    options: NOLOGIN

  - names:
    - AA
    options: NOLOGIN

  grant:
  - privilege: ro
    role: readers
  - privilege: rw
    role: writers
  - privilege: ddl
    role: owners

However, when I change AA to AA{}, I get an error:

  - names:
    - AA{} # or "AA{}"
    options: NOLOGIN

Expectations

I don't quite understand why this is happening, but I think it looks like a bug.

Verbose output of ldap2pg execution

Verbose output Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions