Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-6195

Failed LDAP authentication if user CN contains parenthesis

    XMLWordPrintable

Details

    Description

      Summary

      If FishEye is connected to Microsoft AD for authentication and one (or more) of the users has a parenthesis (() in his CN, when the user will try to authenticate the authentication will fail.

      The user will be correctly synced and will be shown in the user list.

      Environment

      FishEye and Microsoft Active Directory

      Steps to Reproduce

      1. Create a user in Microsoft AD with a parenthesis (() in his CN
      2. Re-sync users
      3. Test the LDAP configuration trying to connect to that user

      Expected Results

      Authentication should succeed and the following info should be showed:

      Actual Results

      The test fails and the following info are showed:

      Nothing is showed in the logs.

      Workaround

      1 - Use JIRA/Crowd as external user directory
      JIRA is not affected by the same bug so, in case a JIRA instance is already used in the same network and it is synced against the same AD it is possible to sync FishEye to use JIRA.

      2 - Modify Users affected
      If the user CN gets modified (to remove the () and FishEye re-syncs with AD the issue disappears and the user is able to connect.

      After that if the user CN is changed again (re-adding the () the authentication succeeds

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              dcarcasole Daniele Carcasole (Inactive)
              Votes:
              3 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: