[jboss-jira] [JBoss JIRA] (WFLY-7322) LDAP referrals does not work in Elytron ldap-realm

Ondrej Lukas (JIRA) issues at jboss.org
Mon Oct 17 09:11:00 EDT 2016


    [ https://issues.jboss.org/browse/WFLY-7322?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13307858#comment-13307858 ] 

Ondrej Lukas commented on WFLY-7322:
------------------------------------

In case when Elytron is able to work with referral based on added filter-name then no additional logic for *follow* will be needed in the code.

However some logic which handles *throw* should be added as well. I am not sure, but from quick code review I think it results to throwing Exception to Undertow, which will result to Internal Server Error.

> LDAP referrals does not work in Elytron ldap-realm
> --------------------------------------------------
>
>                 Key: WFLY-7322
>                 URL: https://issues.jboss.org/browse/WFLY-7322
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 11.0.0.Alpha1
>            Reporter: Ondrej Lukas
>            Assignee: Darran Lofthouse
>            Priority: Blocker
>
> LDAP referrals cannot be used in Elytron {{ldap-realm}}. Ldap Realm is currently not prepared to work with referrals at all:
> * {{ldap-realm}} does not include any options which enable working with LDAP referrals (PicketBox use {{baseFilter}} option which can be configured to return also referral object)
> * implementation of {{org.wildfly.security.auth.realm.ldap.LdapSecurityRealm}} does not include any logic which handles referrals
> Referrals are important feature of LDAP. It has to be covered by Elytron => requested blocker flag.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jboss-jira mailing list