[JIRA] Created: (SIDP-541) Principal string defined in DataConnector is modified to lower case for authentication causing login problems

[sdwarfs@idp.protectnetwork.org (JIRA)]

Principal string defined in DataConnector is modified to lower case for authentication causing login problems
-------------------------------------------------------------------------------------------------------------

                 Key: SIDP-541
                 URL: https://issues.shibboleth.net/jira/browse/SIDP-541
             Project: Shibboleth IdP 2 - Java
          Issue Type: Bug
          Components: Attribute Resolution
    Affects Versions: 2.3.5
         Environment: Win7 64bit
            Reporter: sdwarfs at idp.protectnetwork.org
            Assignee: Chad La Joie


Let's assume the following DataConnector definition (in attribute-resolver.xml):
----
    <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
        ldapURL="ldap://ldap.example.org" 
        baseDN="ou=people,dc=example,dc=org" 
        principal="uid=myService,ou=system"
        principalCredential="myServicePassword">
        <dc:FilterTemplate>
            <![CDATA[
                (uid=$requestContext.principalName)
            ]]>
        </dc:FilterTemplate>
    </resolver:DataConnector>

In that case the Shibboleth IdP would try to authenticate as "uid=myservice,ou=system" (note the lower case "s" in "myservice").
This causes the authentication to fail.

Note: You should also check user authentication process (I did not so far) for the same problem. Meaning: uppercase letters in "uid" entered at single sign on in the browser...

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira