make sure to use the escaped DN; patch from Guenther Deschner; bug 592

(This used to be commit 5eca81c66096a01eda1731892d044c09d4c18556)

diff --git a/source3/nsswitch/winbindd_ads.c b/source3/nsswitch/winbindd_ads.c
index ef3f0f8fc20b766be0d8b1dbcfa87e2e850c9542..5d0f924d8f810bb92793a993219976ee361344a8 100644 (file)
--- a/source3/nsswitch/winbindd_ads.c
+++ b/source3/nsswitch/winbindd_ads.c
@@ -364,7 +364,7 @@ static BOOL dn_lookup(ADS_STRUCT *ads, TALLOC_CTX *mem_ctx,
                return False;
        }
 
-       asprintf(&ldap_exp, "(distinguishedName=%s)", dn);
+       asprintf(&ldap_exp, "(distinguishedName=%s)", escaped_dn);
        rc = ads_search_retry(ads, &res, ldap_exp, attrs);
        SAFE_FREE(ldap_exp);
        SAFE_FREE(escaped_dn);