[jboss-cvs] Picketbox SVN: r154 - trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi.
jboss-cvs-commits at lists.jboss.org
jboss-cvs-commits at lists.jboss.org
Thu Jan 13 14:36:54 EST 2011
Author: mmoyses
Date: 2011-01-13 14:36:54 -0500 (Thu, 13 Jan 2011)
New Revision: 154
Modified:
trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java
Log:
SECURITY-552: tweaking parse option
Modified: trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java
===================================================================
--- trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java 2011-01-13 19:16:36 UTC (rev 153)
+++ trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java 2011-01-13 19:36:54 UTC (rev 154)
@@ -253,6 +253,8 @@
try
{
String username = getUsername();
+ if (trace)
+ log.trace("Binding username: " + username);
createLdapInitContext(username, null);
defaultRole();
}
@@ -680,9 +682,13 @@
int beginIndex = 0;
if (usernameBeginString != null && !usernameBeginString.equals(""))
beginIndex = username.indexOf(usernameBeginString) + usernameBeginString.length();
+ if (beginIndex == -1) // not allowed. reset
+ beginIndex = 0;
int endIndex = username.length();
if (usernameEndString != null && !usernameEndString.equals(""))
- endIndex = username.indexOf(usernameEndString);
+ endIndex = username.substring(beginIndex).indexOf(usernameEndString);
+ if (endIndex == -1) // not allowed. reset
+ endIndex = username.length();
username = username.substring(beginIndex, endIndex);
}
return username;
More information about the jboss-cvs-commits
mailing list