Hi Jochen,

> I detected, that in EPerson.java the netid is manipulated and changed to
> lower case.
> I think this is not good!
> 
> There are some problems:
> - The netid is no longer unique, because U0815 and u0815 will get the
> same netid.

AFAIK most LDAP fields (except e.g. password) are case-insensitive, so this
shouldn't pose a problem.

> - In the findByNetid method there is NO change to lower case, so it can
> not be found.

LDAPAuthentication.java and LDAPHierarchicalAuthentication.java both use
"netid.toLowerCase()" when using the findByNetid method, so that is OK.
However RegisterServlet.java does not - so this probably needs addressing. I
suspect that this hasn't been discovered so far as probably most sites using
LDAP have LDAP auto registration turned on.

It would be good if you could report this in the bug tracker so we can get
it fixed: http://sourceforge.net/tracker/?group_id=19984&atid=119984

Thanks,


Stuart
_________________________________________________________________

Gwasanaethau Gwybodaeth                      Information Services
Prifysgol Aberystwyth                      Aberystwyth University

            E-bost / E-mail: [email protected]
                 Ffon / Tel: (01970) 622860
_________________________________________________________________


------------------------------------------------------------------------------
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech

Reply via email to