[jira] [Created] (KYLIN-5600) LDAP DN is not case sensitive, resulting in user login failure

["huangsheng (Jira)" <ji...@apache.org>]

huangsheng created KYLIN-5600:
---------------------------------

             Summary: LDAP DN is not case sensitive, resulting in user login failure
                 Key: KYLIN-5600
                 URL: https://issues.apache.org/jira/browse/KYLIN-5600
             Project: Kylin
          Issue Type: Bug
          Components: REST Service, Security
    Affects Versions: 5.0-alpha
            Reporter: huangsheng
             Fix For: 5.0-alpha


In some user scenarios, uppercase and lowercase logins to LDAP fail.

Root Cause：

When all users are obtained from ldapUserService in the code, the attribute names in the recorded dn contain uppercase letters, but the DN attribute names passed in by customers when they log in to ldap are lowercase, resulting in inconsistent capitalization and login failure. Customers here CN =xxx,DU=xxx,DC=xxx, but ldap here is cn=xxx,du=xxx,dc=xxx

A point where later maintenance can be optimized: 

When troubleshooting LDAP problems, there are often strange problems that the user names cannot be matched. It is very laborious to troubleshoot. You need to add this information to the log instead of printing it all the time. You can consider printing it after polling for a number of times, and printing it when it is loaded for the first time. and so on

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)