Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
1.11.4
-
None
Description
Current Situation
When LDAP authentication is configured with a mapping of LDAP groups to roles - for example:
sos : it_operator, \ apl : administrator|application_manager
and a new shiro.ini user account is added in the Manage Accounts view then the ":" characters will be replaced with "=" signs when the shiro.ini file is saved with the new account.
When a shiro or LDAP user then attempts to log in an error will occur such as:
2017-11-07 14:25:31,995 ERROR qtp1347137144-21 c.s.j.c.JOCDefaultResponse - org.apache.shiro.config.ConfigurationException: Map property value [sos = it_operator, apl = administrator|application_manager] contained key-value pair token [sos = it_operator] that does not properly split to a single key and pair. This must be the case for all map entries.
All further user authentication will then be blocked until the shiro.ini file is corrected.
Desired Behaviour
It should be possible to use the \ to concate lines for the value of the attribute .groupRolesMapping in the section [main]. When the \ syntax is used in other sections or for other attributes, this will not recognized by the Account Management System in JOC.