[ https://jira.jboss.org/jira/browse/SECURITY-447?page=com.atlassian.jira.p... ] Craig Dent commented on SECURITY-447: ------------------------------------- This feature request is required for the JEAP 5 Shared Services Platform project at Suncorp in Brisbane, Australia. This project has a huge profile in the APJ region, with JEAP 5.0 being deployed on 2000-3000 JVM's and once completed they will be the largest JBoss customer in APJ. Darran has stated that "none of the issues introduce backwards compatibility issues, they are all additional configurable features so if there is demand I could pull this back for EAP 5.0.2." We really need the feature to be included in EAP 5.0.2 to ensure the success of the project. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/SECURITY-447?page=com.atlassian.jira.p... ] Rich Sharples commented on SECURITY-447: ---------------------------------------- This seems like a pretty useful RFE and at some point we do need to start 'certifying' identity stores like MS AD - so this will be a useful enhancement to make that possible. My only concern is the availability of a test environment and the expertise to set it up and maintain it. If QE is comfortable with this then I vote that we commit it for EAP 5.1 as EAP 5.0.2 may be essentially rolled into EAP 5.1. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/SECURITY-447?page=com.atlassian.jira.p... ] Darran Lofthouse updated SECURITY-447: -------------------------------------- Description: The following has some useful details on the history of primary groups: - http://dunnry.com/blog/DeterminingYourPrimaryGroupInActiveDirectoryUsingN... SID Structure: - http://msdn.microsoft.com/en-us/library/cc230371%28v=PROT.10%29.aspx To obtain SID in binary format the following may be required: - env.put("java.naming.ldap.attributes.binary","objectSID"); was: The following has some useful details on the history of primary groups: - http://dunnry.com/blog/DeterminingYourPrimaryGroupInActiveDirectoryUsingN... -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/browse/SECURITY-447?page=com.atlassian.jira.plugin... ] Darran Lofthouse updated SECURITY-447: -------------------------------------- Fix Version/s: Negotiation_2.0.3.SP4 Negotiation_2.0.4.GA (was: Negotiation_2.0.3.SP3) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira