[jboss-jira] [JBoss JIRA] (SECURITY-795) AdvancedLdap login module does not handle a user that has a slash character in the uid

RH Bugzilla Integration (JIRA) issues at jboss.org
Mon Jun 2 08:51:23 EDT 2014


    [ https://issues.jboss.org/browse/SECURITY-795?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12972415#comment-12972415 ] 

RH Bugzilla Integration commented on SECURITY-795:
--------------------------------------------------

mark yarborough <myarboro at redhat.com> changed the Status of [bug 1065513|https://bugzilla.redhat.com/show_bug.cgi?id=1065513] from VERIFIED to CLOSED

> AdvancedLdap login module does not handle a user that has a slash character in the uid
> --------------------------------------------------------------------------------------
>
>                 Key: SECURITY-795
>                 URL: https://issues.jboss.org/browse/SECURITY-795
>             Project: PicketBox 
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>    Affects Versions: Negotiation_2_2_5
>            Reporter: Derek Horton
>            Assignee: Derek Horton
>             Fix For: Negotiation_2_2_7
>
>         Attachments: SECURITY-795.patch
>
>
> AdvancedLdap login module does not handle a user that has a slash character in the uid.
> For example, JBoss will fail to authenticate the following user correctly:
> dn: uid=weird/user,ou=Users,dc=my-domain,dc=com
> uid: weird/user
> cn: Weird User



--
This message was sent by Atlassian JIRA
(v6.2.3#6260)


More information about the jboss-jira mailing list