From db676776e659a9dcba3dad1be8f830d93fba0310 Mon Sep 17 00:00:00 2001 From: Carl Schwan Date: Fri, 4 Sep 2026 17:18:58 +0200 Subject: [PATCH] fix(ldap): Avoid calling ldap_filter with an empty filter Signed-off-by: Carl Schwan --- apps/user_ldap/lib/Connection.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/apps/user_ldap/lib/Connection.php b/apps/user_ldap/lib/Connection.php index 3cc86922dada4..3e5bc62fd1514 100644 --- a/apps/user_ldap/lib/Connection.php +++ b/apps/user_ldap/lib/Connection.php @@ -408,6 +408,12 @@ private function doSoftValidation(): void { } } + // an empty filter is invalid and causes ldap_search() to fail, so + // fall back to matching any object + if (empty($this->configuration->ldapUserFilter)) { + $this->configuration->ldapUserFilter = '(objectClass=*)'; + } + foreach (['ldapExpertUUIDUserAttr' => 'ldapUuidUserAttribute', 'ldapExpertUUIDGroupAttr' => 'ldapUuidGroupAttribute'] as $expertSetting => $effectiveSetting) { $uuidOverride = $this->configuration->$expertSetting;