Mailing-List: contact issues-help@karaf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@karaf.apache.org
Date: Fri, 17 Feb 2017 13:57:41 +0000 (UTC)
From: "Andrea Cosentino (JIRA)" <jira@apache.org>
To: issues@karaf.apache.org
Message-ID: <JIRA.13043664.1487256145000.110324.1487339861706@Atlassian.JIRA>
In-Reply-To: <JIRA.13043664.1487256145000@Atlassian.JIRA>
References: <JIRA.13043664.1487256145000@Atlassian.JIRA> <JIRA.13043664.1487256145922@jira-lw-us.apache.org>
Subject: [jira] [Commented] (KARAF-4989) Make LDAPLoginModule role.mapping
 option understand also fqdn
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Fri, 17 Feb 2017 13:57:46 -0000


    [ https://issues.apache.org/jira/browse/KARAF-4989?page=3Dcom.atlassian=
.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=3D1587=
1886#comment-15871886 ]=20

Andrea Cosentino commented on KARAF-4989:
-----------------------------------------

[~jb@nanthrax.net], can I merge this? Or do you want to merge yourself?

> Make LDAPLoginModule role.mapping option understand also fqdn
> -------------------------------------------------------------
>
>                 Key: KARAF-4989
>                 URL: https://issues.apache.org/jira/browse/KARAF-4989
>             Project: Karaf
>          Issue Type: Improvement
>          Components: karaf-security
>            Reporter: Andrea Tarocchi
>            Assignee: Jean-Baptiste Onofr=C3=A9
>            Priority: Minor
>
> With the current way of parsing {{*role.mapping*}} option in {{*LDAPLogin=
Module*}} is not possible to specify a fqdn; a possible use case is to achi=
eve a mapping like this:
> {code:xml}
>     <jaas:module className=3D"org.apache.karaf.jaas.modules.ldap.LDAPLogi=
nModule">
>       [...]
>       role.base.dn=3Dou=3Dgroups,dc=3Dexample,dc=3Dorg
>       role.name.attribute=3DsomeAttributeResultingInFqdn
>       role.filter=3D(member=3D%fqdn)
>       role.search.subtree=3Dtrue
>       role.mapping=3Dcn=3Dadmin,ou=3Dgroups,dc=3Dexample,dc=3Dorg=3Dkaraf=
Role;cn=3Dadmin,ou=3DotherGroups,dc=3Dexample,dc=3Dorg=3DotherKarafRole
> </jaas:module>
> {code}
> i.e. mapping based on a fqdn string instead of a cn.


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)