[QPID-8625] [Broker-J] ACL rules require full DN when using LDAP authentication

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Implemented
• Affects Version/s: qpid-java-broker-9.0.0
• Fix Version/s: qpid-java-broker-9.1.0
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Daniil Kirilyuk
• Created: 21/Feb/23 14:14
• Updated: 08/Sep/23 08:12
• Resolved: 04/Aug/23 07:28

Description

Currently a reference to a LDAP user in ACL rules requires full DN, e.g.:

ACL ALLOW "cn=danlangford,ou=000,ou=People,o=MyEnterprise" ALL 

It would be beneficial to allow usage of a CN instead:

ACL ALLOW "cn=danlangford" ALL 

or

ACL ALLOW danlangford ALL