Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-2760

No way to configure DN subtree matching to be case-insensitive and handle whitespace properly

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Medium
    • 2.4.2
    • 2.3.2
    • Directory - LDAP
    • None

    Description

      A customer has configured DN subtree matching to use the "naive" implementation in Confluence and they get this error.
      (error from the log)

      <uid=jeffajaxt1,ou=people,o=ajax repair,ou=partners, ou=external, o=sds> is outside the entity base DN subtree scope <ou=partners,ou=external,o=sds>

      the extra spaces in the user DN are causing the match to fail. Turning off the "naive" option fixes this. But then they get case matching issues. For example, they get the following error.

      <uid=JeffAjaxT1,ou=People,o=AJAX REPAIR,ou=Partners,ou=External,o=SDS> is outside the entity base DN subtree scope <ou=partners,ou=external,o=sds>

      So it seems like there is no configuration that provides a way to account for multiple cases and whitespace.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. CONFSERVER-24515 CASE-SENSITIVE DN causes partial synchronization of LDAP membership.

          • Medium - Medium priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CWD-2885 Crowd relies on bug fix in Apache DS 1.5.1

          • Low - Low priority issues
          • Closed
          incorporates

          Bug - A problem which impairs or prevents the functions of the product. CWD-2704 LDAP group membership works only if the DN matches CASE-SENSITIVE

          • Medium - Medium priority issues
          • Closed

          Activity

            People

              jwalton joe
              akazatchkov Anatoli
              Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: