[jboss-jira] [JBoss JIRA] (ELY-945) User names in Elytron FileSystemRealm are not case sensitive on Windows

[David Lloyd (JIRA)]

    [ https://issues.jboss.org/browse/ELY-945?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13362829#comment-13362829 ] 

David Lloyd commented on ELY-945:
---------------------------------

On a similar token, it seems like a really good idea to perform Unicode NFKC normalization as well for the same reason.  For more info see [the JDK docs for java.text.Normalizer|http://download.java.net/java/jdk9/docs/api/index.html?java/text/Normalizer.html].

> User names in Elytron FileSystemRealm are not case sensitive on Windows
> -----------------------------------------------------------------------
>
>                 Key: ELY-945
>                 URL: https://issues.jboss.org/browse/ELY-945
>             Project: WildFly Elytron
>          Issue Type: Bug
>            Reporter: Josef Cacek
>            Assignee: Darran Lofthouse
>            Priority: Blocker
>
> User names are case sensitive on Linux but not on Windows when using the Elytron {{FileSystemSecurityRealm}}
> This is IMO a security issue. And it also affects platform certifications.
> If this is by any chance an expected behavior, then it has to be emphasized in documentation and in the domain model too (description of file-system-realm)



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)