[SHIRO-640] Support user search LDAP expressions

• Type: Improvement
• Status: Open
• Priority: Trivial
• Resolution: Unresolved
• Affects Version/s: 1.2.3
• Component/s: Realms
• Assignee: Unassigned
• Reporter: mephi42
• Created: 04/Nov/17 00:34
• Updated: 26/Apr/19 13:44

Description

I'm trying to deploy Apache Zeppelin (https://zeppelin.apache.org/), which uses Shiro for security. In our organization LDAP is set up in a way that everybody authenticates using email address (which is not part of DN), rather than UID (which is part of DN, but looks extremely ugly).

Other solutions integrate with this scheme by letting me configure LDAP search expression to resolve user DN, for example: (&(mail=%s)(objectclass=Person)). The resolved DN is then used in a regular way for authentication.

I wonder if it would be possible to add such functionality to Shiro?

Issue Links

• links to: GitHub Pull Request #74
• links to: GitHub Pull Request #74