commit 6f6a930fdec746fef3d301f196539aed0fd82fbb
author Marc Kriguer <myk@google.com> Wed Jun 11 13:25:33 2014 -0700
committer Marc Kriguer <myk@google.com> Wed Jun 11 13:25:33 2014 -0700
tree fb4654de759b176e9d4e474b586c28b68af19e3a
parent 4c1340b28496b0bfd5f76b2b24570fb618c36eda

Loosening the parseForeignSecurityPrincipal regex

to allow more "valid" well-known SIDs through.

src/com/google/enterprise/adaptor/ad/AdEntity.java

diff --git a/src/com/google/enterprise/adaptor/ad/AdEntity.java b/src/com/google/enterprise/adaptor/ad/AdEntity.java
index f1e60c2..a1062c9 100644
--- a/src/com/google/enterprise/adaptor/ad/AdEntity.java
+++ b/src/com/google/enterprise/adaptor/ad/AdEntity.java
@@ -308,7 +308,7 @@
     int end = dn.indexOf(',');
     String sid = dn.substring(start + 1, end);
     // check for mangled or malformed security principal format
-    if (!sid.matches("^S-1-5-21(-[0-9]+)+$")) {
+    if (!sid.matches("^S-1-[15](-[0-9]+)+$")) {
       log.fine("invalid foreign security principal [" + dn + "].");
       return null;
     }