[jboss-dev-forums] Problem with LdapExtLoginModule

Anil Saldhana Anil.Saldhana at redhat.com
Wed Jan 14 14:04:20 EST 2009


Thanks for confirming that it was in fact a misconfiguration in the ldap 
server.

None of JBoss JAAS login modules change the case of the password.

Anil Saldhana wrote:
> Gonzalez Lazaro, Edgar wrote:
>> I have a problem trying to login to my application using this module 
>> for JAAS. everything is fine but when i send a password which is not 
>> the same as stored in LDAP in terms of case sensitiveness. I mean :
>>  
>> right password:  asdfASDF
>> wrong password: AsDfAsDF
>>  
>> they are not the same but LdapExtLoginModule thincks they are.
>>  
>> I am making modification to this module due business requirements 
>> associated with cryptography and inspecting the code i have noticed 
>> this issue. I missed some configuration option? or this is a real 
>> issue that
>> must be repaired!
>>
>>  
>> excuse my english please!
>>  
>> Thanks a lot!
>>
>>   
> Have you looked if the LDAP Server is configured to accept case 
> insensitive password?




More information about the jboss-dev-forums mailing list