Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-767

asRdn meaning in LDAP realm

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Major
    • None
    • None
    • Realms
    • None

    Description

      Meaning of asRdn in AttributeMaping of LdapSecurityRealm is illogicaly different for filtered and simple attributes:

      Currently:

      • meaning of asRdn is different for mappings without filter (obtaining attribute from identity entry) and with filter (different entry)
        • simple: value of attribute (defined by ldapName) is parsed as DN
        • filtered: DN of the filtered entry is parsed (and ldapName is ignored - even through it is defined)

      I suggest:

      • when asRdn is defined:
        • if ldapName will be defined, LDAP attribute will be parsed (for filtered mappings too)
        • if ldapName will not be defined, DN of entry will be parsed (DN of identity entry for simple mapping)

      Attachments

        Issue Links

          is cloned by

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) WFLY-7632 asRdn meaning in LDAP realm

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          relates to

          Feature Request - Feature requests from customers and/or users ELY-756 Elytron ldap-realm does not support recursive role search

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Resolved

          Activity

            People

              jkalina@redhat.com Jan Kalina (Inactive)
              jkalina@redhat.com Jan Kalina (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: