[QPID-8375] [Broker-J][ACL] Normalize identinity names represented as Distingished Names

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Alex Rudyy
• Created: 13/Nov/19 11:20
• Updated: 13/Nov/19 11:21

Description

The current implementation of ACL uses case insensitive lookup for the rules by comparing rule identity with the subject principal names. When ACL rule identity is represented as Distinguished name (for example, an LDAP group or LDAP user entity), it is quite easy to specify extra spaces in the rule identity (between RDNs), as result the rule might not be selected for the right principal name. Potentially, the identity names represented as Distingished Names can be normalized in order to get rid from extra spaces. See Distinguished Names.

Issue Links

• supercedes: QPID-8127 [Broker-J][ACL] Allow case insensitive matching of group and user names in existing ACL