[KARAF-4989] Make LDAPLoginModule role.mapping option understand also fqdn

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 4.0.9, 4.1.1
• Component/s: karaf
• Assignee: Jean-Baptiste Onofré
• Reporter: Andrea Tarocchi
• Created: 16/Feb/17 14:42
• Updated: 15/Sep/18 05:45
• Resolved: 28/Feb/17 14:19

Description

With the current way of parsing role.mapping option in LDAPLoginModule is not possible to specify a fqdn; a possible use case is to achieve a mapping like this:

    <jaas:module className="org.apache.karaf.jaas.modules.ldap.LDAPLoginModule">
      [...]
      role.base.dn=ou=groups,dc=example,dc=org
      role.name.attribute=someAttributeResultingInFqdn
      role.filter=(member=%fqdn)
      role.search.subtree=true
      role.mapping=cn=admin,ou=groups,dc=example,dc=org=karafRole;cn=admin,ou=otherGroups,dc=example,dc=org=otherKarafRole
</jaas:module>

i.e. mapping based on a fqdn string instead of a cn.

Issue Links

• links to: GitHub Pull Request #283