[jboss-jira] [JBoss JIRA] Created: (JBAS-3653) Ldap*LoginModule fail to retrieve multiple role names when roleAttributeIsDN=true

[Scott M Stark (JIRA)]

Ldap*LoginModule fail to retrieve multiple role names when roleAttributeIsDN=true
---------------------------------------------------------------------------------

                 Key: JBAS-3653
                 URL: http://jira.jboss.com/jira/browse/JBAS-3653
             Project: JBoss Application Server
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Security
    Affects Versions: JBossAS-4.0.4.GA
            Reporter: Scott M Stark
         Assigned To: Scott M Stark
             Fix For: JBossAS-4.0.5.GA
         Attachments: example2.ldif

For a schema like example2.ldif and a configuration like:
      testLdapExample22 {
         org.jboss.security.auth.spi.LdapExtLoginModule
            java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
            java.naming.provider.url="ldap://lamia/"
            java.naming.security.authentication=simple
            bindDN="cn=Root,dc=jboss,dc=org"
            bindCredential=secret1
            baseCtxDN="ou=People,o=example2,dc=jboss,dc=org"
            baseFilter="(uid={0})"
            rolesCtxDN="ou=Roles,o=example2,dc=jboss,dc=org";
            roleFilter="(uid={0})"
            roleAttributeID="memberOf"
            roleAttributeIsDN="true"
            roleNameAttributeID="cn"
            roleRecursion=0
      };

Only one role is being pulled from the  cn=EchoGroup,ou=Roles,o=example2,dc=jboss,dc=org context, rather the both EchoGroup and TheDuke as only one of the cn attribute values is retrieved.


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira