handavid opened a new pull request, #1502:
URL: https://github.com/apache/knox/pull/1502

   [KNOX-3538](https://issues.apache.org/jira/browse/KNOX-3538) - Add attribute 
normalization interceptor
   
   ## What changes were proposed in this pull request?
   
   Adds the attributenormalizer interceptor, which lowercases values of 
attributes whose schema equality matching rule ignores case in search and 
lookup results. DN-valued attributes and objectClass are left unchanged. The 
entry DN is also lowercased.
   Normalization occurs lazily as the cursor is read.
   
   As part of the change, the memberOf attribute in the proxy schema is given 
the distinguishedNameMatch equality rule. This enables comparison to work 
correctly with different casing and spacing. This also prevents memberOf from 
accepting non-dn values. The schema now normalizes memberOf values as DNs when 
they are added, so a malformed value is rejected with IllegalArgumentException. 
RemoteSchemaConverter now skips and logs such values instead of aborting the 
whole entry conversion.
   
   ## How was this patch tested?
   
   added/updated unit tests
   
   ## Integration Tests
   (Please add or update integration tests 
[`.github/workflows/tests`](.github/workflows/tests) for the feature you are 
adding. If no unit test is added, please explain why. Check out 
[`.github/workflows/tests/README.md`](./workflows/tests/README.md) for 
instructions)
   
   workflow tests updated to use the normalization interceptor with the ldap 
proxy. The normalization interceptor is not used with the roles and roles-rest 
since they test case-sensitivity calling the roles server
    
   ## UI changes
   no UI changes


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to