allow more characters in ldap base_dn attribute

[pve-access-control.git] / PVE / AccessControl.pm

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 0e625d5e178cde7624f5cef275e13f79689e91d2..e860db1e1a41a156bb83e9eea46319aaf4fb111d 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -663,7 +663,7 @@ my $valid_attributes = {
     ldap => {
        server1 => '[\w\d]+(.[\w\d]+)*',
        server2 => '[\w\d]+(.[\w\d]+)*',
-       base_dn => '\w+=[\w\s]+(,\s*\w+=[\w\s]+)*',
+       base_dn => '\w+=[^,]+(,\s*\w+=[^,]+)*',
        user_attr => '\S{2,}',
        secure => '',
        port => '\d+',