Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-3823

Crowd fails to parse AD DNs with more than one trailing spaces

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Low Low
    • None
    • 2.6.6, 2.7.1
    • None
    • None

      Microsoft Active Directory escapes all trailing spaces in the DN components (not just the last one), which causes the spring-ldap 1.3 to fail. This breaks the directory sync from Active Directory that includes 'bad' DNs

      For example:

       import org.springframework.ldap.core.DistinguishedName
       val good = "CN=foo \\ ,DC=example,DC=com"
       val bad =  "CB=foo\\ \\ ,DC=example,DC=com"
       new DistinguishedName(good) // works
       new DistinguishedName(bad)  // throws an exception
      

      See comments for example stack trace.

              Unassigned Unassigned
              ekaukonen eero (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: