Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-760

Elytron Ldap Realm searches roles before validating password

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Critical
    • Resolution: Done
    • Affects Version/s: 1.1.0.Beta13
    • Fix Version/s: 1.1.0.Beta20
    • Component/s: Realms
    • Labels:
      None

      Description

      In Ldap Realm roles are searched before actual user password is validated. Ldap Realm uses following flow:

      1. searching for username
      2. searching for roles (i.e. searching for attributes)
      3. validating password for username

      It means even if wrong password is used then roles in LDAP are searched. Password should be validated before some roles are searched. Current behavior can result to performance issues.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  honza889 Jan Kalina
                  Reporter:
                  olukas Ondrej Lukas
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: