[
https://issues.apache.org/jira/browse/KARAF-606?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jean-Baptiste Onofré updated KARAF-606:
---------------------------------------
Fix Version/s: 2.2.5
> JAAS: Allow LDAPLoginModule to supply role "DN" from LDAP group search
> ----------------------------------------------------------------------
>
> Key: KARAF-606
> URL: https://issues.apache.org/jira/browse/KARAF-606
> Project: Karaf
> Issue Type: Improvement
> Components: karaf-core
> Affects Versions: 2.2.0
> Environment: Windows/any
> Reporter: Kurt Westerfeld
> Assignee: Jean-Baptiste Onofré
> Fix For: 2.2.1, 2.2.5, 3.0.0
>
> Attachments: KARAF-606.patch
>
>
> The LDAPLoginModule has the ability to supply a configuration variable
> (role.name.attribute) to use when creating a role. This value can be changed
> from "cn" to any of a number LDAP attributes. However it cannot access the
> actual distinguished name of the queried groups while processing a login, as
> "dn" or "distinguishedName", "entryDN", etc., are not universally supported
> across LDAP implementations as an attribute.
> Proposal to special case "dn" and use
> javax.naming.directory.SearchResult.getNameInNamespace(), which returns the
> dn of the found groups when converting to a role.
> This is a very small change; will provide a patch.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
