[KARAF-6458] Add option to ignore PartialResultExceptions from Active Directory

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 4.3.0, 4.2.8
• Component/s: karaf
• Labels: ldap
• Assignee: Jean-Baptiste Onofré
• Reporter: Richard Porter
• Created: 16/Oct/19 22:07
• Updated: 20/Oct/19 18:57
• Resolved: 20/Oct/19 18:57

Description

Active Directory does not handle referrals correctly, causing issues with the LdapLoginModule when there are referrals beneath role.base.dn. The Spring team (as well as many others) added a workaround for this issue in version 1.0 of spring-ldap. Their implementation can be seen here: https://github.com/spring-projects/spring-ldap/blob/master/core/src/main/java/org/springframework/ldap/core/LdapTemplate.java#L379-L387.

Following a similar model, a new property can be created to log and ignore PartialResultException in LdapCache.

Issue Links

• links to: GitHub Pull Request #958