[UIMA-5114] DUCC Web Server (WS) needs better user validation for login

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.2.0-Ducc
• Component/s: DUCC
• Assignee: Lou DeGenaro
• Reporter: Lou DeGenaro
• Created: 19/Sep/16 20:52
• Updated: 19/Dec/16 16:26
• Resolved: 19/Dec/16 16:26

Description

A user is able to login to ducc (via ldap) as first.last. But the actual linux userid is First.Last, and when ducc_ling tries to employ first.last the switch-to-user fails.

WS could employ the command "/usr/bin/id first.last" to validate the userid before delegating to ldap.