Uploaded image for project: 'PicketBox '
  1. PicketBox
  2. SECURITY-896

Parsing username works incorrectly in LdapExtLoginModule

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • None
    • PicketBox_4_9_2.Final
    • PicketBox
    • None

    Description

      Option parseUsername from LdapExtLoginModule provides usernameBeginString and usernameEndString which using in code is wrongly implemented in getUsername() method. This method contains several issues related to this parsing:

      1) Even if value of usernameBeginString is not found in username then first part of username with length usernameBeginString.length()-1 is removed.
      2) Everything what is in username before first occurrence of usernameBeginString is removed. IMHO usernameBeginString should be first part of username and only then it should be removed.
      3) End index of substring from username is obtained from first occurrence of usernameEndString value. IMHO usernameEndString should be last occurrence in username and also it should be end of username and only then it should be removed.

      Attachments

        Issue Links

          Activity

            People

              rhn-cservice-bbaranow Bartosz Baranowski
              olukas Ondrej Lukas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: