[jboss-jira] [JBoss JIRA] (WFLY-7322) LDAP referrals does not work in Elytron ldap-realm

[Jan Kalina (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-7322?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13307815#comment-13307815 ] 

Jan Kalina edited comment on WFLY-7322 at 10/17/16 8:18 AM:
------------------------------------------------------------

What exactly should do the "logic which handles referrals"? When the referral-mode is *follow* and the filter-name is 
{code:java}
(|(objectclass=referral)(uid={0}))
{code}
, I am able to log in as user of referred server. (After appliing ELY-663 and WFLY-7320 patches)


was (Author: honza889):
What exactly should do the "logic which handles referrals"? When the referral-mode is *follow* and the filter-name is 
{code:java}
(|(objectClass=referral)(uid={0}))
{code}
, I am able to log in as user of referred server. (After appliing ELY-663 and WFLY-7320 patches)

> LDAP referrals does not work in Elytron ldap-realm
> --------------------------------------------------
>
>                 Key: WFLY-7322
>                 URL: https://issues.jboss.org/browse/WFLY-7322
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>            Priority: Blocker
>
> LDAP referrals cannot be used in Elytron {{ldap-realm}}. Ldap Realm is currently not prepared to work with referrals at all:
> * {{ldap-realm}} does not include any options which enable working with LDAP referrals (PicketBox use {{baseFilter}} option which can be configured to return also referral object)
> * implementation of {{org.wildfly.security.auth.realm.ldap.LdapSecurityRealm}} does not include any logic which handles referrals
> Referrals are important feature of LDAP. It has to be covered by Elytron => requested blocker flag.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)