[jboss-jira] [JBoss JIRA] (ELY-909) Elytron ldap-realm does not handle loops in referrals

[Jan Kalina (JIRA)]

     [ https://issues.jboss.org/browse/ELY-909?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jan Kalina moved WFLY-7946 to ELY-909:
--------------------------------------

              Project: WildFly Elytron  (was: WildFly)
                  Key: ELY-909  (was: WFLY-7946)
          Component/s: Realms
                           (was: Security)
    Affects Version/s: 1.1.0.Beta21
                           (was: 11.0.0.Alpha1)


> Elytron ldap-realm does not handle loops in referrals
> -----------------------------------------------------
>
>                 Key: ELY-909
>                 URL: https://issues.jboss.org/browse/ELY-909
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Realms
>    Affects Versions: 1.1.0.Beta21
>            Reporter: Ondrej Lukas
>            Assignee: Jan Kalina
>            Priority: Critical
>         Attachments: print-roles.war
>
>
> According to LDAP specification [1]: "Clients that follow referrals MUST ensure that they do not loop between servers. They MUST NOT repeatedly contact the same server for the same request with the same parameters.".
> When application server is configured to use ldap-realm with dir-context which uses referral-mode=follow or throw and LDAP servers contain loop then it leads to infinite cycle. It can results to java.lang.OutOfMemoryError on EAP server.
> [1] http://tools.ietf.org/html/rfc4511#section-4.1.10



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)