id	summary	reporter	owner	description	type	status	priority	component	severity	resolution	keywords	cc	release
10309	FILTER_ERROR: {'desc': 'Bad search filter'}	Anonymous	sandinak	Hi, \r\n\r\nwe are having some problems with the trac ActiveDirectoryAuthPlugin (current version -> 0.32 -> 2012-09-12). If we use an AD group with underscore _ or minus - for authentication it always says "Bad search filter". If we create a new group without underscore or minus etc. it also does not work. If we use an existing group, e.g. "Domain Users" it works. Some groups work, some do not work and result in "Bad search filter". We tried also multiple Trac Releases (0.11, 0.12, 1.0) but it looks like a problem of the ActiveDirectoryAuthPlugin.\r\n\r\n{{{\r\nTrac detected an internal error:\r\nFILTER_ERROR: {'desc': 'Bad search filter'}\r\n\r\nPython Traceback\r\n\r\nMost recent call last:\r\nTraceback (most recent call last):\r\n  File "build/bdist.linux-x86_64/egg/trac/web/main.py", line 513, in _dispatch_request\r\n    dispatcher.dispatch(req)\r\n  File "build/bdist.linux-x86_64/egg/trac/web/main.py", line 235, in dispatch\r\n    resp = chosen_handler.process_request(req)\r\n  File "build/bdist.linux-x86_64/egg/trac/admin/web_ui.py", line 80, in process_request\r\n    panels, providers = self._get_panels(req)\r\n  File "build/bdist.linux-x86_64/egg/trac/admin/web_ui.py", line 163, in _get_panels\r\n    p = list(provider.get_admin_panels(req) or [])\r\n  File "build/bdist.linux-x86_64/egg/acct_mgr/admin.py", line 194, in get_admin_panels\r\n    if req.perm.has_permission('ACCTMGR_CONFIG_ADMIN'):\r\n  File "build/bdist.linux-x86_64/egg/trac/perm.py", line 553, in has_permission\r\n    return self._has_permission(action, resource)\r\n  File "build/bdist.linux-x86_64/egg/trac/perm.py", line 567, in _has_permission\r\n    check_permission(action, perm.username, resource, perm)\r\n  File "build/bdist.linux-x86_64/egg/trac/perm.py", line 454, in check_permission\r\n    perm)\r\n  File "build/bdist.linux-x86_64/egg/trac/perm.py", line 286, in check_permission\r\n    get_user_permissions(username)\r\n  File "build/bdist.linux-x86_64/egg/trac/perm.py", line 372, in get_user_permissions\r\n    for perm in self.store.get_user_permissions(username) or []:\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/api.py", line 43, in get_user_permissions\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/auth.py", line 199, in get_permission_groups\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/auth.py", line 271, in _get_user_dn\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/auth.py", line 129, in has_user\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/auth.py", line 73, in get_users\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/auth.py", line 104, in expand_group_users\r\n  File "build/bdist.linux-x86_64/egg/tracext/adauth/auth.py", line 456, in _ad_search\r\n  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 551, in search_s\r\n    return self.search_ext_s(base,scope,filterstr,attrlist,attrsonly,None,None,timeout=self.timeout)\r\n  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 855, in search_ext_s\r\n    return self._apply_method_s(SimpleLDAPObject.search_ext_s,*args,**kwargs)\r\n  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 804, in _apply_method_s\r\n    return func(self,*args,**kwargs)\r\n  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 544, in search_ext_s\r\n    msgid = self.search_ext(base,scope,filterstr,attrlist,attrsonly,serverctrls,clientctrls,timeout,sizelimit)\r\n  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 540, in search_ext\r\n    timeout,sizelimit,\r\n  File "/usr/lib64/python2.7/site-packages/ldap/ldapobject.py", line 98, in _ldap_call\r\n    result = func(*args,**kwargs)\r\nFILTER_ERROR: {'desc': 'Bad search filter'}\r\n}}}\r\n\r\n{{{\r\nSystem Information:\r\n\r\nTrac_0.12\r\nBabel_0.9.6\r\nGenshi_0.6\r\nmod_wsgi_3.3 (WSGIProcessGroup WSGIApplicationGroup %{GLOBAL})\r\npysqlite_2.6.0\r\nPython_2.7.2 (default, Aug 19 2011, 20:41:43) [GCC]\r\nsetuptools_0.6c11\r\nSQLite_3.7.8\r\nSubversion_1.6.18 (r1303927)\r\n}}}	defect	closed	normal	DirectoryAuthPlugin	normal	fixed			0.12