Details
-
Bug
-
Resolution: Duplicate
-
Low
-
None
-
2.6.6, 2.7.1
-
None
-
None
Description
Microsoft Active Directory escapes all trailing spaces in the DN components (not just the last one), which causes the spring-ldap 1.3 to fail. This breaks the directory sync from Active Directory that includes 'bad' DNs
For example:
import org.springframework.ldap.core.DistinguishedName val good = "CN=foo \\ ,DC=example,DC=com" val bad = "CB=foo\\ \\ ,DC=example,DC=com" new DistinguishedName(good) // works new DistinguishedName(bad) // throws an exception
See comments for example stack trace.