[ARTEMIS-2535] Add option to ignore PartialResultExceptions in LDAP searches

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.11.0
• Component/s: Broker
• Assignee: Unassigned
• Reporter: Josh Smith
• Created: 30/Oct/19 17:04
• Updated: 10/Jan/20 17:39
• Resolved: 31/Oct/19 13:20

Description

Active Directory doesn't handle referrals automatically, which causes a PartialResultException to be thrown whenever a referral is encountered beneath the search DN, even if Context.REFERRAL is set to `ignore` [1].

Spring [1], Karaf [2] and others have implemented workarounds for this in the form of an option to ignore these PartialResultExceptions. Add a similar option to the LDAPLoginModule so that referrals can be ignored when working with Active Directory.

[1] https://docs.spring.io/autorepo/docs/spring-ldap/current/apidocs/org/springframework/ldap/core/LdapTemplate.html

[2] https://github.com/apache/karaf/blob/master/manual/src/main/asciidoc/developer-guide/security-framework.adoc#ldaploginmodule]

Issue Links

• links to: GitHub Pull Request #2879