Active Roles LDAP Parser accepts incorrectly formatted LDAP (4378718)

When entering a custom LDAP query into the membership rule of a Dynamic Group or a Managed Unit, if the LDAP query is incorrectly formatted, it should be rejected with an error.

However, the Active Roles LDAP Parser accepts placing the negation operator ! in an ambiguous location.

For example:

This LDAP filter is correct:

(!(objectClass=user))

This LDAP filter is NOT correct, but is accepted by Active Roles:

(!objectClass=user)

This issue is being tracked as Defect ID 481457.

WORKAROUND

Confirm that custom LDAP queries are properly formatted using an independent LDAP parser.

STATUS

Waiting for fix in a future release of Active Roles.