]
Darran Lofthouse updated ELY-1675:
----------------------------------
Fix Version/s: (was: 1.8.0.CR1)
Merge roles from entry and entry attributes
-------------------------------------------
Key: ELY-1675
URL:
https://issues.jboss.org/browse/ELY-1675
Project: WildFly Elytron
Issue Type: Bug
Components: Realms
Affects Versions: 1.7.0.CR1
Reporter: Martin Choma
Priority: Critical
Double check Elytron ldap realm is capable doing this:
Having ldap entries like this
{code}
dn: cn=jduke,ou=Roles,ou=example2,${dnSuffix}
objectClass: top
objectClass: organizationalRole
description: cn=Echo,ou=Roles,ou=example2,${dnSuffix}
description: cn=TheDuke,ou=Roles,ou=example2,${dnSuffix}
cn: jduke
{code}
User will have roles jduke, Echo and TheDuke.
This was possible with Picketbox with this configuration
{code}
EapSetupTask roleAttributesConfiguration =
new LdapExtSecurityDomainBuilder(SECURITY_DOMAIN_NAME_PREFIX + DEP2)
.prepareDefaultForLdapServer(ldapServer)
.baseCtxDN("ou=People,ou=example2," +
ldapServer.getDNSuffix())
.rolesCtxDN("ou=Roles,ou=example2," +
ldapServer.getDNSuffix())
.referral("ignore")
.roleFilter("(|(objectClass=referral)(cn={0}))")
.roleAttributeID("description")
.roleAttributeIsDN("true")
.roleNameAttributeID("cn")
.roleRecursion("0")
.configure();
{code}