Uploaded image for project: 'Guacamole'
  1. Guacamole
  2. GUACAMOLE-717

LDAP authentication fails if search result count exceeds ldap-max-search-result

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Minor
    • Resolution: Fixed
    • 1.0.0
    • 1.1.0
    • guacamole-client
    • None

    Description

      If the search results from an LDAP search exceed ldap-max-search-results, the search will fail and the user will receive an error on login. The logs do not show any indication of what the problem is.

      After troubleshooting, I've determined that the LDAPSearchResults.next() function returns an LDAPException "Sizelimit Exceeded". In ObjectQueryService.search(), this is not handled within the immediate try/catch block so the other valid results are not returned to the calling function. The fix is to also catch LDAPException when catching LDAPReferralException.

      Pull request is incoming.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. GUACAMOLE-702 LDAP login impossible for large directories (large search results)

          • Major - Major loss of function.
          • Closed
          is fixed by

          Improvement - An improvement or enhancement to an existing feature or task. GUACAMOLE-234 Migrate from JLDAP to Apache Directory LDAP API

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              joelb Joel Best
              joelb Joel Best
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: