[MGNLLDAP-12] Should not expect password attribute Created: 27/Apr/07  Updated: 27/Nov/13  Resolved: 03/May/07

Status: Closed
Project: LDAP Connector
Component/s: None
Affects Version/s: 1.0-rc3
Fix Version/s: 1.0-rc3

Type: Improvement Priority: Major
Reporter: Yuanhua Qu Assignee: Sameer Charles
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

window xp, redhat linux
tomcat 5.0.28
jdk1.5.0_08


Issue Links:
dependency
depends upon MGNLLDAP-3 Allow user authentication without acc... Closed
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)

 Description   

We don't have a password attibute from our LDAP server returned. Magnolia LDAP module needs read the password from the returned query result from LDAP server to use to authenticate the user.

That's why we got this ERROR in magnolia log

ERROR info.magnolia.jaas.sp.ldap.LDAPAuthenticationModule 25.04.2007
11:42:15 – Failed to read password string from LDAP

This mechenism raised security issue.



 Comments   
Comment by Yuanhua Qu [ 27/Apr/07 ]

Looks like it was improved with the new jar Sameer sent to me on April 27,2007.

Generated at Mon Feb 12 02:20:43 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.