Alex Rudyy created QPID-8375:
--------------------------------

             Summary: [Broker-J][ACL] Normalize identinity names represented as 
Distingished Names
                 Key: QPID-8375
                 URL: https://issues.apache.org/jira/browse/QPID-8375
             Project: Qpid
          Issue Type: Improvement
          Components: Broker-J
            Reporter: Alex Rudyy


The current implementation of ACL uses  case insensitive lookup for the rules 
by comparing rule identity with the subject principal names. When ACL rule 
identity is represented as Distinguished name (for example, an LDAP group or 
LDAP user entity), it is quite easy to specify extra spaces in the rule 
identity (between RDNs), as result the rule might not be selected for the right 
principal name. Potentially, the identity names represented as Distingished 
Names can be normalized in order to get rid from extra spaces. See 
[Distinguished Names|https://ldapwiki.com/wiki/Distinguished%20Names]. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to