You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Alex Rudyy (JIRA)" <ji...@apache.org> on 2018/03/12 15:45:01 UTC
[jira] [Created] (QPID-8127) [Broker-J][ACL] Allow case insensitive
matching of group and user names in existing ACL
Alex Rudyy created QPID-8127:
--------------------------------
Summary: [Broker-J][ACL] Allow case insensitive matching of group and user names in existing ACL
Key: QPID-8127
URL: https://issues.apache.org/jira/browse/QPID-8127
Project: Qpid
Issue Type: Improvement
Components: Broker-J
Reporter: Alex Rudyy
The current ACL rules matching functionality is case sensitive for user names and group names.
When SimpleLdap authentication provider is configured and groups are fetched from LDAP as distinguished names, it is quite easy to make a mistake in group/user DN and put some of letter in wrong case as LDAP DN search is case-insensitive. Thus, users can specify some parts of DN in ACL using letters in wrong case.
The debugging of such mistyped names can be time-consuming. IMHO, it make more sense to add ability into ACL implementation to match groups and user names in case insensitive way.
The following link provides a good overview of case sensitivity of DN:
[http://ldapwiki.com/wiki/Distinguished%20Name%20Case%20Sensitivity]
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org