[JS2-750] LDAP login not resolving DN correctly

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.3, 2.2.0
• Component/s: Security
• Environment: XP, jBoss, ApacheDS
• Assignee: David Sean Taylor
• Reporter: shim manning
• Created: 18/Jul/07 13:15
• Updated: 04/Oct/11 21:08
• Resolved: 21/Aug/07 21:26

Description

Useing ApacheDS with the supplied src\components\security\src\test\JETSPEED-INF\directory\config\apacheds\setup5\company1.ldif tree, I am unable to login to the portal. Jetspeed finds the user name correctly. But trying to login gives 'invalid password'.

I tracked the issue down to AbstractLDapDao.java in getFirstDnForUid, the userDn that is returned is relative to the search path. ie "uid=admin" is returned instead of the full DN of "uid=admin,ou=People,ou=OrgUnit1"

Because of the relative DN, the uid is not correct later when it is used. (ie "uid=admin,o=sevenSeas" instead of "uid=admin,ou=People,ou=OrgUnit1,o=sevenSeas" )

Checking searchResult.isRelative() returns true. Attaching StringUtils.replace(getSearchDomain(), "," + getRootContext(), "") (the base search path) onto the end of userDn seems to fix this.

Issue Links

• relates to: JS2-814 Ldap User DN is incorrectly calculated when search filterBase is empty