[jboss-jira] [JBoss JIRA] (ELY-945) User names in Elytron FileSystemRealm are not case sensitive on Windows

Bartosz Baranowski (JIRA) issues at jboss.org
Thu Mar 16 07:21:00 EDT 2017


    [ https://issues.jboss.org/browse/ELY-945?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13378932#comment-13378932 ] 

Bartosz Baranowski commented on ELY-945:
----------------------------------------

Given that implementation relies on Path(Path p = p.resolve(next)), this is JDK bug. Not much can be done aside of lower casing everything.



> User names in Elytron FileSystemRealm are not case sensitive on Windows
> -----------------------------------------------------------------------
>
>                 Key: ELY-945
>                 URL: https://issues.jboss.org/browse/ELY-945
>             Project: WildFly Elytron
>          Issue Type: Bug
>            Reporter: Josef Cacek
>            Assignee: Bartosz Baranowski
>            Priority: Blocker
>
> User names are case sensitive on Linux but not on Windows when using the Elytron {{FileSystemSecurityRealm}}
> This is IMO a security issue. And it also affects platform certifications.
> If this is by any chance an expected behavior, then it has to be emphasized in documentation and in the domain model too (description of file-system-realm)



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list