Bug#818553: exim4-daemon-heavy: LDAP lookup results using wrong delimiter

[Timo Boettcher]

Package: exim4-daemon-heavy
Version: 4.86.2
Severity: normal
Tags: upstream patch

Dear Maintainer,

from exim 4.84.2 (jessie) to 4.86.2 (stretch) the output of LDAP lookups using
lookup ldapm changed.

The older version returned multiple entries in a line separated fashion as
specified in the exim specification:
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-file_and_database_lookups.html#SECID71

A query like
exim -be '${lookup ldapm{user=LDAP_USER pass=LDAP_PASS ldap://LDAP_HOST/ou=domains,LDAP_BASE?dc?one}}'
would return
domain1
domain2
domain3
domain4

This broke with 4.86.2, perhaps earlier:
The same query will now return
domain1
,domain2
,domain3
,domain4

This is in violation of the exim spec as listed above, stating that commas are
only to be expected if multiple attributes for a single value exist. This was
not the case here.

In a common use case like
domainlist local_domains = <\n ${lookup ldapm{user=LDAP_USER pass=LDAP_PASS ldap://LDAP_HOST/ou=domains,LDAP_BASE?dc?one}}
this would leave local_domains empty, causing exim not to accept
incoming mail, breaking existing installations on upgrade.

This bug has already been fixed in master with bb4fd71. That commit has been
backported to 4.86.2 by Heiko Schlittermann and is contained in attached patch.

Please include the patch in 4.86.2.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fix_broken_ldap_sep.patch
Type: text/x-diff
Size: 5859 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-exim4-maintainers/attachments/20160317/e02dd439/attachment-0001.patch>