[jboss-jira] [JBoss JIRA] (WFLY-7322) LDAP referrals does not work in Elytron ldap-realm
Ondrej Lukas (JIRA)
issues at jboss.org
Mon Oct 17 09:11:00 EDT 2016
[ https://issues.jboss.org/browse/WFLY-7322?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13307858#comment-13307858 ]
Ondrej Lukas commented on WFLY-7322:
------------------------------------
In case when Elytron is able to work with referral based on added filter-name then no additional logic for *follow* will be needed in the code.
However some logic which handles *throw* should be added as well. I am not sure, but from quick code review I think it results to throwing Exception to Undertow, which will result to Internal Server Error.
> LDAP referrals does not work in Elytron ldap-realm
> --------------------------------------------------
>
> Key: WFLY-7322
> URL: https://issues.jboss.org/browse/WFLY-7322
> Project: WildFly
> Issue Type: Bug
> Components: Security
> Affects Versions: 11.0.0.Alpha1
> Reporter: Ondrej Lukas
> Assignee: Darran Lofthouse
> Priority: Blocker
>
> LDAP referrals cannot be used in Elytron {{ldap-realm}}. Ldap Realm is currently not prepared to work with referrals at all:
> * {{ldap-realm}} does not include any options which enable working with LDAP referrals (PicketBox use {{baseFilter}} option which can be configured to return also referral object)
> * implementation of {{org.wildfly.security.auth.realm.ldap.LdapSecurityRealm}} does not include any logic which handles referrals
> Referrals are important feature of LDAP. It has to be covered by Elytron => requested blocker flag.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
More information about the jboss-jira
mailing list