You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@karaf.apache.org by "Jamie goodyear (Closed) (JIRA)" <ji...@apache.org> on 2012/01/19 16:28:41 UTC
[jira] [Closed] (KARAF-606) JAAS: Allow LDAPLoginModule to supply
role "DN" from LDAP group search
[ https://issues.apache.org/jira/browse/KARAF-606?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jamie goodyear closed KARAF-606.
--------------------------------
> JAAS: Allow LDAPLoginModule to supply role "DN" from LDAP group search
> ----------------------------------------------------------------------
>
> Key: KARAF-606
> URL: https://issues.apache.org/jira/browse/KARAF-606
> Project: Karaf
> Issue Type: Improvement
> Components: karaf-core
> Affects Versions: 2.2.0
> Environment: Windows/any
> Reporter: Kurt Westerfeld
> Assignee: Jean-Baptiste Onofré
> Fix For: 2.2.1, 2.2.5, 3.0.0
>
> Attachments: KARAF-606.patch
>
>
> The LDAPLoginModule has the ability to supply a configuration variable (role.name.attribute) to use when creating a role. This value can be changed from "cn" to any of a number LDAP attributes. However it cannot access the actual distinguished name of the queried groups while processing a login, as "dn" or "distinguishedName", "entryDN", etc., are not universally supported across LDAP implementations as an attribute.
> Proposal to special case "dn" and use javax.naming.directory.SearchResult.getNameInNamespace(), which returns the dn of the found groups when converting to a role.
> This is a very small change; will provide a patch.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira