David Han created KNOX-3385:
-------------------------------

             Summary: Knox LDAP Proxy accepts proxy base dn
                 Key: KNOX-3385
                 URL: https://issues.apache.org/jira/browse/KNOX-3385
             Project: Apache Knox
          Issue Type: Improvement
          Components: Server
            Reporter: David Han
            Assignee: David Han
             Fix For: 3.0.0


The UserSearchInterceptor was modified to only forward the search to the 
backend if the base dn of the search matches the backend base dn. We should 
also forward searches that use the proxy base dn.
The initial restriction was put in place to prevent system/operational 
searches. The new implementation should also respect this restriction.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to