You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-dev@portals.apache.org by "David Sean Taylor (JIRA)" <je...@portals.apache.org> on 2006/07/24 18:35:14 UTC

[jira] Resolved: (JS2-562) LDAP attribute name comparison should be case-insensitive

     [ http://issues.apache.org/jira/browse/JS2-562?page=all ]

David Sean Taylor resolved JS2-562.
-----------------------------------

    Fix Version/s: 2.1-dev
       Resolution: Fixed

Michael, applied your patch, thanks.

> LDAP attribute name comparison should be case-insensitive
> ---------------------------------------------------------
>
>                 Key: JS2-562
>                 URL: http://issues.apache.org/jira/browse/JS2-562
>             Project: Jetspeed 2
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 2.0-FINAL
>         Environment: Windows 2000 SP4, JDK1.5, Apache-DS 
>            Reporter: Michael Kearns
>         Assigned To: David Sean Taylor
>             Fix For: 2.1-dev
>
>
> When trying to authenticate against an LDAP server (in this case, Apache-DS from a seperate installation), the authentication failed because the userPassword attribute was not found.
> The attribute exists within LDAP, but the case is different (userpassword). While the schema suggests the specified ID (userPassword) is correct, I believe  LDAP is supposedly case-insensitive, and so ideally the attribute comparison should also be.
> The change required is to the getAttribute method within org.apache.jetspeed.security.spi.impl.ldap.LdapUserCredentialDaoImpl, replacing the equals() method with equalsIgnoreCase().

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org