Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-2760

No way to configure DN subtree matching to be case-insensitive and handle whitespace properly

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 2.4.2
    • 2.3.2
    • Directory - LDAP
    • None

      A customer has configured DN subtree matching to use the "naive" implementation in Confluence and they get this error.
      (error from the log)

      <uid=jeffajaxt1,ou=people,o=ajax repair,ou=partners, ou=external, o=sds> is outside the entity base DN subtree scope <ou=partners,ou=external,o=sds>

      the extra spaces in the user DN are causing the match to fail. Turning off the "naive" option fixes this. But then they get case matching issues. For example, they get the following error.

      <uid=JeffAjaxT1,ou=People,o=AJAX REPAIR,ou=Partners,ou=External,o=SDS> is outside the entity base DN subtree scope <ou=partners,ou=external,o=sds>

      So it seems like there is no configuration that provides a way to account for multiple cases and whitespace.

              jwalton joe
              akazatchkov Anatoli
              Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: