[exim] Re: Fwd: Upon applying 4.96-1 on test, "Tainted arg 2…

On Thu, Nov 09, 2023 at 10:29:46AM -0600, Johnnie W Adams via Exim-users wrote:
> Thanks! That's got me almost there. This works when I test with exim -be,
> but in exim.conf, it fails with missing lookup type:
>
> command = "/opt/lsoft/listserv/bin/lsv_amin /opt/lsoft/listserv/spool
> ${lookup ldap{ldap://
> ldap.test.ualr.edu/ou=Lists,ou=Local,o=test.ualr.edu,dc=mail,dc=test,dc=ualr,dc=edu?cn?(mail=${quote_ldap:$local_part@$domain})}fail
> }"

I suspect this lookup statement can't even be parsed due to invalid syntax:
1. the is no scope definition ("base" or "sub"), 2. there is one result
field (fail), while lookup sybtax requires zero or two fields.

Parsing should become successful with changes like that:

command="/opt/lsoft/listserv/bin/lsv_amin /opt/lsoft/listserv/spool ${lookup ldap{ldap://ldap.test.ualr.edu/ou=Lists,ou=Local,o=test.ualr.edu,dc=mail,dc=test,dc=ualr,dc=edu?cn?sub?(mail=${quote_ldap:$local_part@$domain})}{$value}fail}"

> On Thu, Nov 9, 2023 at 5:50 AM Oleksandr Kryvulia via Exim-users <
> exim-users@???> wrote:
> 
> > Use in transport same lookup as in a router:
> >
> >    driver = pipe
> >    command = "/opt/lsoft/listserv/bin/lsv_amin /opt/lsoft/listserv/spool
> > ${lookup ldap{...}{$value}fail}"
> >

--
Eugene Berdnikov

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/