You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@qpid.apache.org by "Alex Rudyy (Jira)" <ji...@apache.org> on 2019/11/13 10:02:00 UTC

[jira] [Closed] (QPID-8127) [Broker-J][ACL] Allow case insensitive matching of group and user names in existing ACL

     [ https://issues.apache.org/jira/browse/QPID-8127?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Rudyy closed QPID-8127.
----------------------------
    Resolution: Invalid

A new JIRA QPID-8374 was raised to implement case insensitive group mapping

> [Broker-J][ACL] Allow case insensitive matching of group and user names in existing ACL
> ---------------------------------------------------------------------------------------
>
>                 Key: QPID-8127
>                 URL: https://issues.apache.org/jira/browse/QPID-8127
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Broker-J
>            Reporter: Alex Rudyy
>            Priority: Major
>
> The current ACL rules matching functionality is case sensitive for user names and group names.
> When SimpleLdap authentication provider is configured and groups are fetched from LDAP as distinguished names, it is quite easy to make a mistake in group/user DN and put some of letter in wrong case as LDAP DN search is case-insensitive. Thus, users can specify some parts of DN in ACL using letters in wrong case.
> The debugging of such mistyped names can be time-consuming. IMHO, it make more sense to add ability into ACL implementation to match groups and user names in case insensitive way.
> The following link provides a good overview of case sensitivity of DN:
> [http://ldapwiki.com/wiki/Distinguished%20Name%20Case%20Sensitivity]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org