[
https://issues.jboss.org/browse/WFLY-7322?page=com.atlassian.jira.plugin....
]
Jan Kalina updated WFLY-7322:
-----------------------------
Comment: was deleted
(was: Problem in FOLLOW mode: NamingEnumeration.hasMore create new LdapReferralContext and
socket, which is not covered by DelegatingDirContext yet.
{code:text}
java.lang.RuntimeException: ELY01084: Error while consuming results from search. SearchDn
[dc=users,dc=elytron,dc=wildfly,dc=org], Filter [(|(objectclass=referral)(uid={0}))],
Filter Args [[refUser]].
Caused by: javax.naming.PartialResultException [Root exception is
javax.naming.CommunicationException: localhost:11391 [Root exception is
java.lang.IllegalStateException: ELY04025: DirContext tries to connect without
SSLSocketFactory thread local setting]]
at
com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:237)
at
com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMore(AbstractLdapNamingEnumeration.java:189)
at
org.wildfly.security.auth.realm.ldap.LdapSecurityRealm$LdapRealmIdentity$LdapSearch$1.tryAdvance(LdapSecurityRealm.java:938)
... 39 more
Caused by: javax.naming.CommunicationException: localhost:11391 [Root exception is
java.lang.IllegalStateException: ELY04025: DirContext tries to connect without
SSLSocketFactory thread local setting]
at com.sun.jndi.ldap.LdapReferralContext.<init>(LdapReferralContext.java:95)
at
com.sun.jndi.ldap.LdapReferralException.getReferralContext(LdapReferralException.java:150)
at
com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreReferrals(AbstractLdapNamingEnumeration.java:325)
at
com.sun.jndi.ldap.AbstractLdapNamingEnumeration.hasMoreImpl(AbstractLdapNamingEnumeration.java:227)
... 41 more
Caused by: java.lang.IllegalStateException: ELY04025: DirContext tries to connect without
SSLSocketFactory thread local setting
at
org.wildfly.security.auth.realm.ldap.ThreadLocalSSLSocketFactory.getDefault(ThreadLocalSSLSocketFactory.java:46)
at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.sun.jndi.ldap.Connection.createSocket(Connection.java:284)
at com.sun.jndi.ldap.Connection.<init>(Connection.java:203)
at com.sun.jndi.ldap.LdapClient.<init>(LdapClient.java:137)
at com.sun.jndi.ldap.LdapClient.getInstance(LdapClient.java:1614)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2746)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:319)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:151)
at
com.sun.jndi.url.ldap.ldapURLContextFactory.getObjectInstance(ldapURLContextFactory.java:52)
at javax.naming.spi.NamingManager.getURLObject(NamingManager.java:601)
at javax.naming.spi.NamingManager.processURL(NamingManager.java:381)
at javax.naming.spi.NamingManager.processURLAddrs(NamingManager.java:361)
at javax.naming.spi.NamingManager.getObjectInstance(NamingManager.java:333)
at com.sun.jndi.ldap.LdapReferralContext.<init>(LdapReferralContext.java:114)
... 44 more
{code}
)
LDAP referrals does not work in Elytron ldap-realm
--------------------------------------------------
Key: WFLY-7322
URL:
https://issues.jboss.org/browse/WFLY-7322
Project: WildFly
Issue Type: Bug
Components: Security
Affects Versions: 11.0.0.Alpha1
Reporter: Ondrej Lukas
Assignee: Jan Kalina
Priority: Blocker
LDAP referrals cannot be used in Elytron {{ldap-realm}}. Ldap Realm is currently not
prepared to work with referrals at all:
* {{ldap-realm}} does not include any options which enable working with LDAP referrals
(PicketBox use {{baseFilter}} option which can be configured to return also referral
object)
* implementation of {{org.wildfly.security.auth.realm.ldap.LdapSecurityRealm}} does not
include any logic which handles referrals
Referrals are important feature of LDAP. It has to be covered by Elytron => requested
blocker flag.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)