-
Bug
-
Resolution: Done
-
Major
-
jBPM 6.0.1.Final
-
None
If ldap(AD)'s structure is like this:
samle ldap tree
- com - sample - Business Unit 1 - Subunit 1.1 - user 1 - user 2 - Business Unit 2 - Subunit 2.1 - user 3
we can not find all of users in this structure by Using appropriate base DN, "com.sample", because default search scope used by LDAPUserGroupCallbackImpl is "one"[1]. Therefore, setting base DN to the root DN does not work.
Although we can use a custom LDAPUserGroupCallbackImpl, this is a common use case for ldap search, so I report it as bug.
[1] Default is search one level
http://docs.oracle.com/javase/7/docs/api/javax/naming/directory/SearchControls.html#SearchControls()