[jboss-jira] [JBoss JIRA] (WFLY-5786) LdapExtLoginModule does not handle loops in referrals

LdapExtLoginModule does not handle loops in referrals ----------------------------------------------------- Key: WFLY-5786 URL: https://issues.jboss.org/browse/WFLY-5786 Project: WildFly Issue Type: Bug Components: Security Affects Versions: 10.0.0.CR4 Reporter: Ondrej Lukas Assignee: Darran Lofthouse Priority: Critical Attachments: app.war, server1.ldif, server2.ldif According to LDAP specification [1]: "Clients that follow referrals MUST ensure that they do not loop between servers. They MUST NOT repeatedly contact the same server for the same request with the same parameters.". When Wildfly server is configured to use LdapExtLoginModule which uses referrals and LDAP servers contain loop then it leads to infinite cycle. It can results to java.lang.OutOfMemoryError on Wildfly server. [1] http://tools.ietf.org/html/rfc4511#section-4.1.10