Alex Rudyy created QPID-8127:
--------------------------------

             Summary: [Broker-J][ACL] Allow case insensitive matching of group 
and user names in existing ACL
                 Key: QPID-8127
                 URL: https://issues.apache.org/jira/browse/QPID-8127
             Project: Qpid
          Issue Type: Improvement
          Components: Broker-J
            Reporter: Alex Rudyy


The current ACL rules matching functionality is case sensitive for user names 
and group names.

When SimpleLdap authentication provider is configured and groups are fetched 
from LDAP as distinguished names, it is quite easy to make a mistake in 
group/user DN and put some of letter in wrong case as LDAP DN search is 
case-insensitive. Thus, users can specify some parts of DN in ACL using letters 
in wrong case.

The debugging of such mistyped names can be time-consuming. IMHO, it make more 
sense to add ability into ACL implementation to match groups and user names in 
case insensitive way.

The following link provides a good overview of case sensitivity of DN:
[http://ldapwiki.com/wiki/Distinguished%20Name%20Case%20Sensitivity]





--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org

Reply via email to