escaping erb parameters

asked 2015-07-01 14:36:28 -0500

Yalu
1 ●1 ●1

Hi,

when passing a parameter (an LDAP serach filter) to ERB template this does not translate as expected.

My parameter (from hiera yaml) I expect to be literally translated:

appregaaa::radldapprops: filter: '(&(uid=%{User-Name})(o:dn:=%{Realm}))'

The erb template section:

filter = "<%= @radldap_props['filter'] %>"

The result:

filter = "(&(uid=)(o:dn:=))"

I guess both %{User-Name} and %{Realm} get reinterpreted, but I can't seem to figure out how to prevent this and apply the correct escaping. Any help greatly appreciated.

answered 2015-07-05 21:37:52 -0500

Alex Harvey

2222 ●2 ●10 ●27 http://razorconsulting...

updated 2015-07-05 22:19:30 -0500

The variables used in ERB templates should come from your manifests, not directly from hiera.

You need something like:

Hiera:

app_regaaa::radldap_props::filter: '...<your_filter>...'

Manifest:

class app_regaaa::radldap_props (
  $filter,
) {
  validate_string($filter)
  ...

ERB template:

filter = "<%= @filter %>"

Note that you may have trouble escaping the % sign in your hiera data, have a look at e.g. this jira ticket

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

1 Answer

Your Answer

Question Tools

Stats

escaping erb parameters edit

1 Answer