directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Endi Sukma Dewata" <end...@vergenet.com>
Subject Access to LdapPrincipal constructor
Date Sat, 30 Apr 2005 02:24:24 GMT
Hi,

 

I just found out that the access to LdapPrincipal constructor has been
restricted to the package only. This is a problem because any custom
Authenticator would need to create and return an LdapPrincipal object in the
authenticate() method. See the example under Custom Authenticator:

 

http://directory.apache.org/subprojects/apacheds/users/authentication.html.

 

Is there a specific example where making the constructor publicly accessible
would pose a security problem? Any suggestions on how to resolve this?
Thanks a lot.

 

--

Endi S. Dewata

 


Mime
View raw message