[gatein-issues] [JBoss JIRA] (GTNPORTAL-1948) LDAPIdentityStoreImpl not working when LDAP name contains "comma"

LDAPIdentityStoreImpl not working when LDAP name contains "comma" ----------------------------------------------------------------- Key: GTNPORTAL-1948 URL: https://issues.jboss.org/browse/GTNPORTAL-1948 Project: GateIn Portal Issue Type: Bug Security Level: Public(Everyone can see) Components: Identity integration Affects Versions: 3.1.0-GA Environment: Enterprise Portal Platform 5.1.0 CentOS 5.4 Microsoft Active Directory Reporter: Georg Fleischer Assignee: Boleslaw Dawidowicz Labels: CN, IDM, LDAP, specialcharacters Fix For: 3.3.0.CR01 Attachments: ActiveDirectoryAndreasMueller.PNG, idm-ldap-bug.txt Situation: In our Active Directory the users were created with names containing a comma. For example the user "Andreas Mueller" has the LDAP name "Mueller, Andreas" (see attached screenshot). I have configured the LDAP Identity store using the predefined configuration: picketlink-idm-msad-readonly-config.xml All groups and users are displayed correctly in the User- and Group Management of the portal, but the users are not listed inside the groups. Identified problem: I tracked down the problem by enabling logging for the LDAPIdentityStoreImpl class and gathered the log attached to this issue. In my oppinion the problem lies between line 19 and line 20 in the log. Method 'findIdentityObject' called with arguments: id; CN=Mueller\, Andreas,OU=Stadt,OU=KOMM,OU=IDVSFDP_ORGS,DC=dus,DC=local; Method 'findIdentityObject' called with arguments: name; Mueller\; IdentityObjectType; SimpleIdentityObjectType{name='msad_roles_type'}; I seems that the correct CN is found, but in the next line the escaped comma was not recognized. Instead of "Mueller\, Andreas" only the name "Mueller\" is used for search. And this user does not exist. Kind regards, Georg Fleischer