Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 4233 invoked from network); 24 Apr 2006 15:20:20 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 24 Apr 2006 15:20:20 -0000 Received: (qmail 61061 invoked by uid 500); 24 Apr 2006 15:20:16 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 60837 invoked by uid 500); 24 Apr 2006 15:20:15 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 60824 invoked by uid 99); 24 Apr 2006 15:20:15 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 24 Apr 2006 08:20:15 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received: from [209.237.227.198] (HELO brutus.apache.org) (209.237.227.198) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 24 Apr 2006 08:20:14 -0700 Received: from brutus (localhost.localdomain [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 0F3A37142C0 for ; Mon, 24 Apr 2006 15:19:06 +0000 (GMT) Message-ID: <22029667.1145891946038.JavaMail.jira@brutus> Date: Mon, 24 Apr 2006 15:19:06 +0000 (GMT+00:00) From: "Emmanuel Lecharny (JIRA)" To: dev@directory.apache.org Subject: [jira] Commented: (DIRSERVER-606) ou=users, ou=system - user cannot see their own entry In-Reply-To: <1942518626.1144099366669.JavaMail.jira@ajax> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N [ http://issues.apache.org/jira/browse/DIRSERVER-606?page=comments#action_12376047 ] Emmanuel Lecharny commented on DIRSERVER-606: --------------------------------------------- So let's go for the renaming. I'll do it as soon I'm back home. DefaultAuthZService seems ok. What we can do is to apply Stefan patch as is, and latter we can improve the password exposure (for instance, returns stars instead of real password). At least we can discuss about it later. wdyt ? need a vote ? > ou=users, ou=system - user cannot see their own entry > ----------------------------------------------------- > > Key: DIRSERVER-606 > URL: http://issues.apache.org/jira/browse/DIRSERVER-606 > Project: Directory ApacheDS > Type: Bug > Versions: 1.0-RC1 > Environment: JDK 1.4.1 > Tried both JXplorer, and from ACEGI security > Reporter: Marc Batchelor > Assignee: Stefan Zoerner > Priority: Critical > Attachments: patch.txt, patch_DIRSERVER-606_2.txt > > User binds to ApacheDS as a user under ou=users, ou=system. The user cannot see their own entry to get their own attributes. > Documentation states: Users cannot see other user entries under the 'ou=users,ou=system' entry. > Agreed and understood. But, the user, after binding with the directory, cannot even find their own entry to get their own attributes. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira