David Han created KNOX-3425:
-------------------------------
Summary: Ldap Proxy may allow anonymous bind
Key: KNOX-3425
URL: https://issues.apache.org/jira/browse/KNOX-3425
Project: Apache Knox
Issue Type: Bug
Components: Server
Affects Versions: 3.0.0
Reporter: David Han
Assignee: David Han
Fix For: 3.0.0, 3.1.0
The UserSearchInterceptor is configured before the AuthenticationInterceptor.
The search implementation swallows exceptions with the intention to allow
partial results from multiple backends. The bug is that this exception handling
behavior also swallows exceptions raised by the authentication interceptor.
I think that the behavior should be changed to raise any exceptions rather than
swallowing. Swallowing exceptions also makes it unclear if there were any
configuration problems connecting to a remote backend.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
