[jboss-jira] [JBoss JIRA] (WFLY-5786) LdapExtLoginModule does not handle loops in referrals

[Ondrej Lukas (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-5786?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ondrej Lukas updated WFLY-5786:
-------------------------------
    Description: 
According to LDAP specification [1]: "Clients that follow referrals MUST ensure that they do not loop between servers. They MUST NOT repeatedly contact the same server for the same request with the same parameters.".

When Wildfly server is configured to use LdapExtLoginModule which uses referrals and LDAP servers contain loop then it leads to infinite cycle. It can results to java.lang.OutOfMemoryError on Wildfly server.

[1] http://tools.ietf.org/html/rfc4511#section-4.1.10

  was:
According to LDAP specification [1]: "Clients that follow referrals MUST ensure that they do not loop between servers. They MUST NOT repeatedly contact the same server for the same request with the same parameters.".

When EAP server is configured to use LdapExtLoginModule which uses referrals and LDAP servers contain loop then it leads to infinite cycle. It can results to java.lang.OutOfMemoryError on EAP server.

We hit this issue during certification of 3rd Party LDAP servers. This issue is not regression to EAP 6.x.

[1] http://tools.ietf.org/html/rfc4511#section-4.1.10



> LdapExtLoginModule does not handle loops in referrals
> -----------------------------------------------------
>
>                 Key: WFLY-5786
>                 URL: https://issues.jboss.org/browse/WFLY-5786
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>            Priority: Critical
>         Attachments: app.war, server1.ldif, server2.ldif
>
>
> According to LDAP specification [1]: "Clients that follow referrals MUST ensure that they do not loop between servers. They MUST NOT repeatedly contact the same server for the same request with the same parameters.".
> When Wildfly server is configured to use LdapExtLoginModule which uses referrals and LDAP servers contain loop then it leads to infinite cycle. It can results to java.lang.OutOfMemoryError on Wildfly server.
> [1] http://tools.ietf.org/html/rfc4511#section-4.1.10



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)