[gatein-issues] [JBoss JIRA] Updated: (GTNPORTAL-1948) LDAPIdentityStoreImpl not working when LDAP name contains "comma"

[Boleslaw Dawidowicz (JIRA)]

     [ https://issues.jboss.org/browse/GTNPORTAL-1948?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Boleslaw Dawidowicz updated GTNPORTAL-1948:
-------------------------------------------

    Fix Version/s: 3.2.0-M02


> LDAPIdentityStoreImpl not working when LDAP name contains "comma"
> -----------------------------------------------------------------
>
>                 Key: GTNPORTAL-1948
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-1948
>             Project: GateIn Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Identity integration
>    Affects Versions: 3.1.0-GA
>         Environment: Enterprise Portal Platform 5.1.0
> CentOS 5.4
> Microsoft Active Directory
>            Reporter: Georg Fleischer
>            Assignee: Boleslaw Dawidowicz
>              Labels: CN, IDM, LDAP, specialcharacters
>             Fix For: 3.2.0-M02
>
>         Attachments: ActiveDirectoryAndreasMueller.PNG, idm-ldap-bug.txt
>
>
> Situation:
> In our Active Directory the users were created with names containing a comma. For example the user "Andreas Mueller" has the LDAP name "Mueller, Andreas" (see attached screenshot).
>  
> I have configured the LDAP Identity store using the predefined configuration: picketlink-idm-msad-readonly-config.xml
> All groups and users are displayed correctly in the User- and Group Management of the portal, but the users are not listed inside the groups.
> Identified problem:
> I tracked down the problem by enabling logging for the LDAPIdentityStoreImpl class and gathered the log attached to this issue.
> In my oppinion the problem lies between line 19 and line 20 in the log. 
> Method 'findIdentityObject' called with arguments: id; CN=Mueller\, Andreas,OU=Stadt,OU=KOMM,OU=IDVSFDP_ORGS,DC=dus,DC=local; 
> Method 'findIdentityObject' called with arguments: name; Mueller\; IdentityObjectType; SimpleIdentityObjectType{name='msad_roles_type'}; 
> I seems that the correct CN is found, but in the next line the escaped comma was not recognized. Instead of "Mueller\, Andreas" only the name "Mueller\" is used for search. And this user does not exist.
> Kind regards,
> Georg Fleischer

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira