[jboss-jira] [JBoss JIRA] (SECURITY-783) LdapExtLoginModule's bindCredential requires vault string to be in a slightly different format than other components

Derek Horton (JIRA) issues at jboss.org
Thu Jan 9 11:13:34 EST 2014


    [ https://issues.jboss.org/browse/SECURITY-783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12934739#comment-12934739 ] 

Derek Horton commented on SECURITY-783:
---------------------------------------

I've attached a potential patch to resolve this issue.
                
> LdapExtLoginModule's bindCredential requires vault string to be in a slightly different format than other components
> --------------------------------------------------------------------------------------------------------------------
>
>                 Key: SECURITY-783
>                 URL: https://issues.jboss.org/browse/SECURITY-783
>             Project: PicketBox 
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: PicketBox
>    Affects Versions: PicketBox_4_0_19.Final
>            Reporter: Derek Horton
>            Assignee: Stefan Guilhen
>            Priority: Minor
>         Attachments: SECURITY-783.patch
>
>
> The LdapExtLoginModule requires that the vault string used for the bindCredentials not include the '${' prefix and '}' suffix.  This is different than other places in the standalone.xml file where the ${ and } are required.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list