Alex Rudyy created QPID-8127:
--------------------------------
Summary: [Broker-J][ACL] Allow case insensitive matching of group
and user names in existing ACL
Key: QPID-8127
URL: https://issues.apache.org/jira/browse/QPID-8127
Project: Qpid
Issue Type: Improvement
Components: Broker-J
Reporter: Alex Rudyy
The current ACL rules matching functionality is case sensitive for user names
and group names.
When SimpleLdap authentication provider is configured and groups are fetched
from LDAP as distinguished names, it is quite easy to make a mistake in
group/user DN and put some of letter in wrong case as LDAP DN search is
case-insensitive. Thus, users can specify some parts of DN in ACL using letters
in wrong case.
The debugging of such mistyped names can be time-consuming. IMHO, it make more
sense to add ability into ACL implementation to match groups and user names in
case insensitive way.
The following link provides a good overview of case sensitivity of DN:
[http://ldapwiki.com/wiki/Distinguished%20Name%20Case%20Sensitivity]
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
