From 5e3d9d8618f63737e3b07149a3dddcca7e29cf7d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Stefan=20B=C3=BChler?= Date: Wed, 21 Jan 2026 11:31:04 +0100 Subject: [PATCH] use only first line from multi-line password entries (and strip whitespace) --- src/ldaptool/search/_search.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/ldaptool/search/_search.py b/src/ldaptool/search/_search.py index 124f1f5..dcd577b 100644 --- a/src/ldaptool/search/_search.py +++ b/src/ldaptool/search/_search.py @@ -26,7 +26,10 @@ def search(*, config: Config, arguments: Arguments) -> typing.Iterable[Result]: if arguments.krb: ldap_con.sasl_gssapi_bind_s() else: - ldap_con.simple_bind_s(realm.account, config.get_password(realm)) + password = config.get_password(realm) + # use only first line (and without whitespace); assume remaining lines are comments/... + password = password.splitlines()[0].strip() + ldap_con.simple_bind_s(realm.account, password) assert arguments.base assert arguments.filter