[
https://issues.apache.org/jira/browse/KNOX-3538?focusedWorklogId=1053925&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1053925
]
ASF GitHub Bot logged work on KNOX-3538:
----------------------------------------
Author: ASF GitHub Bot
Created on: 10/Nov/26 22:29
Start Date: 10/Nov/26 22:29
Worklog Time Spent: 10m
Work Description: handavid opened a new pull request, #1502:
URL: https://github.com/apache/knox/pull/1502
[KNOX-3538](https://issues.apache.org/jira/browse/KNOX-3538) - Add attribute
normalization interceptor
## What changes were proposed in this pull request?
Adds the attributenormalizer interceptor, which lowercases values of
attributes whose schema equality matching rule ignores case in search and
lookup results. DN-valued attributes and objectClass are left unchanged. The
entry DN is also lowercased.
Normalization occurs lazily as the cursor is read.
As part of the change, the memberOf attribute in the proxy schema is given
the distinguishedNameMatch equality rule. This enables comparison to work
correctly with different casing and spacing. This also prevents memberOf from
accepting non-dn values. The schema now normalizes memberOf values as DNs when
they are added, so a malformed value is rejected with IllegalArgumentException.
RemoteSchemaConverter now skips and logs such values instead of aborting the
whole entry conversion.
## How was this patch tested?
added/updated unit tests
## Integration Tests
(Please add or update integration tests
[`.github/workflows/tests`](.github/workflows/tests) for the feature you are
adding. If no unit test is added, please explain why. Check out
[`.github/workflows/tests/README.md`](./workflows/tests/README.md) for
instructions)
workflow tests updated to use the normalization interceptor with the ldap
proxy. The normalization interceptor is not used with the roles and roles-rest
since they test case-sensitivity calling the roles server
## UI changes
no UI changes
Issue Time Tracking
-------------------
Worklog Id: (was: 1053925)
Remaining Estimate: 0h
Time Spent: 10m
> LDAP Proxy normalize attributes by lowercasing
> ----------------------------------------------
>
> Key: KNOX-3538
> URL: https://issues.apache.org/jira/browse/KNOX-3538
> Project: Apache Knox
> Issue Type: Improvement
> Components: Server
> Affects Versions: 3.1.0
> Reporter: David Han
> Assignee: David Han
> Priority: Major
> Fix For: 3.1.0
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The LDAP Proxy returns attributes in whatever casing the backed provides.
> This may cause issues in systems that are not aware which attributes are case
> sensitive or case insensitive. Provide the ability for the LDAP Proxy to
> lowercase values for case insensitive attributes.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
