Velocity support for LDAP authentication filter

Description

The LDAP filter used to find a user for authentication uses the ldaptive syntax of {user} for variable substitution.
Investigate using velocity syntax to provide some consistency between the resolver and authn configurations.

Environment

None

Activity

Daniel FisherMay 25, 2016 at 3:55 AM

Some additional work in r8254.

Daniel FisherMay 11, 2016 at 3:31 AM

I realized the new classes in authn.impl should probably be moved to -api since they will be exposed in ldap-authn-config.xml.

Daniel FisherMay 11, 2016 at 3:28 AM

Yeah and it's not clear which of these other subcontexts would provide anything useful for the LDAP filter.

Scott CantorMay 11, 2016 at 2:58 AM

I was thinking of the Script plugins, those have the PRC also.

It's not that important since you can just walk up the tree obviously.

Daniel FisherMay 11, 2016 at 2:53 AM

We include the AttributeResolutionContext and a class that emulates the v2 ProfileRequestContext. (Wrapper around the resolution context.)

Fixed

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Created October 2, 2015 at 6:15 PM
Updated November 11, 2016 at 12:24 AM
Resolved May 10, 2016 at 2:36 AM

Flag notifications