Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-23793

[GSS](7.4.z) ELY-2358 - Option extract-rdn selects the rightmost matching RDN instead of the leftmost one


      When a mapping in a ldap realm is configured to use the option extract-rdn, for example something like the following:

      /subsystem=elytron/ldap-realm=ldap_realm:add(dir-context=ldap_dir-context, direct-verification=true, identity-mapping=\{search-base-dn="cn=Users,dc=example,dc=com", rdn-identifier="samacountname", attribute-mapping=[{from="memberOf", to="Roles", extract-rdn="cn"}]})

      The RDN farthest to the right with name cn is selected. For example with a group name cn=Role1,cn=Roles,dc=example,dc=com the value Roles is returned instead of Role1. This makes no sense because all the roles inside that branch will be transformed in the same role name Roles. The RDN situated furthest to the left should be selected instead, Role1 in the example.

            rhn-support-rmartinc Ricardo Martin Camarero
            rhn-support-orivat Olivier Rivat
            1 Vote for this issue
            5 Start watching this issue