Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
LDAP group mapping: stringwise comparison fails due to different DN formats #1790
LDAP group mapping is a very appreciated feature for us. Thanks for implementing it!
This is what the trace shows:
In LdapConnector.findGroups, the DN of ldapEntry is compared stringswise with each member attribute of a group:
Since org.apache.directory.api.ldap.model.name.Dn.getName() returns a string where RDNs are separated by comma and whitespace, the strings do not match although the DNs are semantically equal.
According to RFC 2253, whitespaces are allowed between RDNs while RFC 4514 defines the string representation without whitespaces. So maybe you could remove whitespaces from the strings before comparing them by something like
PS: We are using Graylog 1.3.3