entityanalytics_ad: password is not properly escaped when containing $

[P1llus]

Integration Name

Active Directory Entity Analytics [packages/entityanalytics_ad]

Dataset Name

entity

Integration Version

0.21.0

Agent Version

9.4.3

Agent Output Type

elasticsearch

Elasticsearch Version

9.4.3

OS Version and Architecture

Unsure

Software/API Version

No response

Error Message

No response

Event Original

No response

What did you do?

Applying a password with the $ in it or ending with $. Removing the character makes it work, adding it back makes it stop working again.

What did you see?

Authentication failed

What did you expect to see?

Authentication with passwords that include $ or ends with $ should also work

Anything else?

No response

[infra-vault-gh-plugin-prod]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[efd6]

This is an issue with elastic-agent-libs; it enables VarExp which has the effect of allowing variable interpolation. This also means that $$ is treated as an escape sequence for $. Probably this should not be being done for secrets.

[infra-vault-gh-plugin-prod]

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)