[jboss-cvs] Picketbox SVN: r506 - trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi.

[jboss-cvs-commits at lists.jboss.org]

Author: dehort
Date: 2014-02-20 11:56:38 -0500 (Thu, 20 Feb 2014)
New Revision: 506

Modified:
   trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java
Log:
[SECURITY-796] Fixed an issue where the LdapExtended login module does not handle a user that has a slash character in the uid


Modified: trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java
===================================================================
--- trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java	2014-01-29 09:16:33 UTC (rev 505)
+++ trunk/security-jboss-sx/jbosssx/src/main/java/org/jboss/security/auth/spi/LdapExtLoginModule.java	2014-02-20 16:56:38 UTC (rev 506)
@@ -40,6 +40,7 @@
 import javax.naming.directory.SearchResult;
 import javax.naming.ldap.InitialLdapContext;
 import javax.naming.ldap.LdapContext;
+import javax.naming.CompositeName;
 import javax.security.auth.Subject;
 import javax.security.auth.callback.CallbackHandler;
 import javax.security.auth.login.LoginException;
@@ -547,7 +548,7 @@
       if (userDN == null)
       {
           if (sr.isRelative() == true) {
-             userDN = name + ("".equals(baseDN) ? "" : "," + baseDN);
+             userDN = new CompositeName(name).get(0) + ("".equals(baseDN) ? "" : "," + baseDN);
           }
           else {
              throw PicketBoxMessages.MESSAGES.unableToFollowReferralForAuth(name);