From 325776eaf2a744cbc1569450781d202451d3feec Mon Sep 17 00:00:00 2001
From: felixboehm <felix@webhippie.de>
Date: Mon, 4 Jul 2016 14:16:13 +0200
Subject: check if renamed user is still valid by reapplying the ldap filter
 (#25338)

---
 apps/user_ldap/lib/User_LDAP.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/user_ldap/lib/User_LDAP.php b/apps/user_ldap/lib/User_LDAP.php
index 230c82a3045..7929394893b 100644
--- a/apps/user_ldap/lib/User_LDAP.php
+++ b/apps/user_ldap/lib/User_LDAP.php
@@ -228,6 +228,10 @@ class User_LDAP extends BackendUtility implements \OCP\IUserBackend, \OCP\UserIn
 					return false;
 				}
 				$newDn = $this->access->getUserDnByUuid($uuid);
+				//check if renamed user is still valid by reapplying the ldap filter
+				if(!is_array($this->access->readAttribute($newDn, '', $this->access->connection->ldapUserFilter))) {
+					return false;
+				}
 				$this->access->getUserMapper()->setDNbyUUID($newDn, $uuid);
 				return true;
 			} catch (\Exception $e) {
-- 
cgit v1.2.3