[jboss-jira] [JBoss JIRA] (WFLY-6520) LdapExtLoginModule does not use empty string for rolesCtxDN search correctly

[Ondrej Lukas (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-6520?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ondrej Lukas updated WFLY-6520:
-------------------------------
    Description: 
Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against .

Issue is caused by fix of JBEAP-137. This issue was discovered during development of new regression tests for that issue.

  was:
Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against EAP 6.4.x.

Issue is caused by fix of JBEAP-137. This issue was discovered during development of new regression tests for that issue.



> LdapExtLoginModule does not use empty string for rolesCtxDN search correctly
> ----------------------------------------------------------------------------
>
>                 Key: WFLY-6520
>                 URL: https://issues.jboss.org/browse/WFLY-6520
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>            Priority: Critical
>
> Using LdapExtLoginModule rolesCtxDN with empty string causes that no role search is done, i.e. no roles are assigned to user even if LDAP contains this mapping. In correct behavior empty string should be used as base DN of ldap search. It is regression against .
> Issue is caused by fix of JBEAP-137. This issue was discovered during development of new regression tests for that issue.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)