[jboss-jira] [JBoss JIRA] (WFLY-6037) User with Slash char in LDAP name cannot log in through security-realm

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-6037?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13151004#comment-13151004 ] 

Darran Lofthouse commented on WFLY-6037:
----------------------------------------

Security realm issues need to be raised under WFCORE - please move this issue over.

> User with Slash char in LDAP name cannot log in through security-realm
> ----------------------------------------------------------------------
>
>                 Key: WFLY-6037
>                 URL: https://issues.jboss.org/browse/WFLY-6037
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Hynek Švábek
>            Assignee: Darran Lofthouse
>
> According to LDAP specification [1], DN can contain slash char without escaping, etc.
> I am not able to log in to management console with username "Slash/Char". But I would be able to log in there. 
> I can see this in Wireshark
> {code}
> LDAPMessage bindRequest(1) ""uid=Slash/Char",ou=People,o=LdapRealmSpecialNameManualTest7d339efa,o=primary,dc=jboss,dc=org" simple
> LDAPMessage bindResponse(1) invalidDNSyntax (Incorrect DN given : "uid=Slash/Char",ou=People,o=LdapRealmSpecialNameManualTest7d339efa,o=primary,dc=jboss,dc=org (0x22 0x75 0x69 0x64 0x3D 0x53 0x6C 0x61 0x73 0x68 0x2F 0x43 0x68 0x61 0x72 0x2
> {code}
> You can see there quotation marks around *uid=Slash/Char*.
> In my opinion problem can be somewhere around this
> {code}
> javax.naming.NameImpl.stringifyComp(String comp)
> {code}
> [1] https://tools.ietf.org/html/rfc2253#section-3



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)