You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Oliver Wulff (Created) (JIRA)" <ji...@apache.org> on 2011/11/17 21:45:51 UTC
[jira] [Created] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Support for KerberosToken in RST if LdapClaimsHandler used
----------------------------------------------------------
Key: CXF-3922
URL: https://issues.apache.org/jira/browse/CXF-3922
Project: CXF
Issue Type: New Feature
Components: Services
Affects Versions: 2.5
Reporter: Oliver Wulff
If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Posted by "Colm O hEigeartaigh (Assigned) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-3922?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh reassigned CXF-3922:
----------------------------------------
Assignee: Colm O hEigeartaigh
> Support for KerberosToken in RST if LdapClaimsHandler used
> ----------------------------------------------------------
>
> Key: CXF-3922
> URL: https://issues.apache.org/jira/browse/CXF-3922
> Project: CXF
> Issue Type: New Feature
> Components: Services
> Affects Versions: 2.5
> Reporter: Oliver Wulff
> Assignee: Colm O hEigeartaigh
> Attachments: patch.git.diff
>
>
> If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Posted by "Colm O hEigeartaigh (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-3922?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13152894#comment-13152894 ]
Colm O hEigeartaigh commented on CXF-3922:
------------------------------------------
Hi Oli,
> String dn = getDnOfPrincipal(principal.getName());
I'm guessing this should be:
String dn = getDnOfPrincipal(user);
?
Also, I don't think the "SAMLTokenPrincipal" check is necessary as it'll be handled by the "principal != null" check.
Colm.
Colm.
> Support for KerberosToken in RST if LdapClaimsHandler used
> ----------------------------------------------------------
>
> Key: CXF-3922
> URL: https://issues.apache.org/jira/browse/CXF-3922
> Project: CXF
> Issue Type: New Feature
> Components: Services
> Affects Versions: 2.5
> Reporter: Oliver Wulff
> Attachments: patch.git.diff
>
>
> If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Posted by "Colm O hEigeartaigh (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-3922?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh updated CXF-3922:
-------------------------------------
Fix Version/s: 2.5.1
> Support for KerberosToken in RST if LdapClaimsHandler used
> ----------------------------------------------------------
>
> Key: CXF-3922
> URL: https://issues.apache.org/jira/browse/CXF-3922
> Project: CXF
> Issue Type: New Feature
> Components: Services
> Affects Versions: 2.5
> Reporter: Oliver Wulff
> Assignee: Colm O hEigeartaigh
> Fix For: 2.5.1
>
> Attachments: patch.git.diff
>
>
> If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Posted by "Oliver Wulff (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-3922?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13152913#comment-13152913 ]
Oliver Wulff commented on CXF-3922:
-----------------------------------
You're right on both. Thanks.
> Support for KerberosToken in RST if LdapClaimsHandler used
> ----------------------------------------------------------
>
> Key: CXF-3922
> URL: https://issues.apache.org/jira/browse/CXF-3922
> Project: CXF
> Issue Type: New Feature
> Components: Services
> Affects Versions: 2.5
> Reporter: Oliver Wulff
> Assignee: Colm O hEigeartaigh
> Attachments: patch.git.diff
>
>
> If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Posted by "Colm O hEigeartaigh (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-3922?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh resolved CXF-3922.
--------------------------------------
Resolution: Fixed
> Support for KerberosToken in RST if LdapClaimsHandler used
> ----------------------------------------------------------
>
> Key: CXF-3922
> URL: https://issues.apache.org/jira/browse/CXF-3922
> Project: CXF
> Issue Type: New Feature
> Components: Services
> Affects Versions: 2.5
> Reporter: Oliver Wulff
> Assignee: Colm O hEigeartaigh
> Fix For: 2.5.1
>
> Attachments: patch.git.diff
>
>
> If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (CXF-3922) Support for KerberosToken in RST if
LdapClaimsHandler used
Posted by "Oliver Wulff (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-3922?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Oliver Wulff updated CXF-3922:
------------------------------
Attachment: patch.git.diff
The attached patch checks for KerberosPrincipal and parses the principal name.
If it's an X509 token, a warning is logged and no claims returned.
> Support for KerberosToken in RST if LdapClaimsHandler used
> ----------------------------------------------------------
>
> Key: CXF-3922
> URL: https://issues.apache.org/jira/browse/CXF-3922
> Project: CXF
> Issue Type: New Feature
> Components: Services
> Affects Versions: 2.5
> Reporter: Oliver Wulff
> Attachments: patch.git.diff
>
>
> If the authenticated Principal is a KerberosPrincipal the method retrieveClaimValues fails in LdapClaimsHandler because Principal.getName() returns fully qualified Kerberos Principal name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira