[OAK-7428] LdapIdentityProvider doesn't support creating external ids from the uid attribute

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.10.0, 1.9.1, 1.4.23, 1.6.14, 1.8.7
• Component/s: auth-ldap
• Assignee: Manfred Baedke
• Reporter: Manfred Baedke
• Created: 19/Apr/18 16:04
• Updated: 15/Jan/19 18:02
• Resolved: 08/May/18 14:32

Description

The LdapIdentityProvider always uses the value of an authorizable's DN to create external ids. But DNs may change over time, while the external id of an authorizable has to be stable because the property rep:externalId is protected.

Therefore we need to add the option to use the value of a configurable LDAP attribute to create external ids from it.

Issue Links

• is related to: OAK-7987 LdapIdentityProviderImpl#getIdentity(ExternalIdentityRef) won't work with useUidForExtId enabled