From 3fa75434770147778f84b791f7373c26bfe9ed8e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=94=D0=B5=D0=BD=D0=B8=D1=81=20=D0=9A=D1=80=D0=B8=D0=B2?=
 =?UTF-8?q?=D0=BE=D1=87=D0=B5=D0=BD=D0=BA=D0=BE?= <d.krivochenko@sibcem.ru>
Date: Wed, 22 Jul 2026 18:53:34 +0700
Subject: [PATCH] =?UTF-8?q?fix:=20LDAP=20filter=20malformed=20=E2=80=94=20?=
 =?UTF-8?q?=D0=B4=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5=D0=BD=20=D1=81=D0=B8?=
 =?UTF-8?q?=D0=BC=D0=B2=D0=BE=D0=BB=20'|'=20=D0=B2=20or=5Ffilter?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

search_by_user_id: or_filter был '(...)' вместо '(|...)' — LDAP требовал OR-оператор
---
 utils/ad_search.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/utils/ad_search.py b/utils/ad_search.py
index 4b1e973..ad8e148 100644
--- a/utils/ad_search.py
+++ b/utils/ad_search.py
@@ -49,7 +49,7 @@ def search_by_user_id(user_id: str, attributes: list[str] | None = None) -> list
         "(userPrincipalName={})".format(short_username + "@sibcem.ru"),
         "(sAMAccountName={})".format(safe_sam),
     ]
-    or_filter = "({})".format("".join(or_parts))
+    or_filter = "(|{})".format("".join(or_parts))
     search_filter = "(&{}{})".format("(objectClass=user)", or_filter)
 
     conn = _get_conn()