Bug 1084601 - [GSS] (6.3.0) Backport PLINK-405
Summary: [GSS] (6.3.0) Backport PLINK-405
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: JBoss Enterprise Application Platform 6
Classification: JBoss
Component: PicketLink
Version: 6.2.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ER2
: EAP 6.3.0
Assignee: Anil Saldhana
QA Contact: Josef Cacek
Nichola Moore
URL:
Whiteboard:
Depends On:
Blocks: 1084593 1084597 1091177 1095230
TreeView+ depends on / blocked
 
Reported: 2014-04-04 19:26 UTC by Derek Horton
Modified: 2014-08-12 02:08 UTC (History)
3 users (show)

Fixed In Version:
Clone Of: 1084596
: 1085534 (view as bug list)
Environment:
Last Closed: 2014-06-28 15:44:35 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker PLINK-405 0 Major Resolved Make the principal that gets sent to the AttributeManager configurable 2015-11-25 09:18:27 UTC

Description Derek Horton 2014-04-04 19:26:06 UTC 
Backport PLINK-405
Comment 1 Derek Horton 2014-04-04 19:27:50 UTC 
Functionality can be enabled as shown here:

  <valve>                                                                                                                                                              
     <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name>                                                             
     <param>                                                                                                                                                           
       <param-name>passUserPrincipalToAttributeManager</param-name>                                                                                                    
       <param-value>true</param-value>                                                                                                                                 
     </param>                                                                                                                                                          
   </valve>
Comment 2 Derek Horton 2014-04-07 19:55:48 UTC 
Reproducer notes for hashed user principal PL issue:

idp.war/WEB-INF/picketlink.xml (set the AttributeManager):

<PicketLink xmlns="urn:picketlink:identity-federation:config:2.1">
  <PicketLinkIDP xmlns="urn:picketlink:identity-federation:config:2.1"
                 AttributeManager="org.picketlink.identity.federation.bindings.jboss.attribute.JBossAppServerAttributeManager"
                 StrictPostBinding="true">


idp.war/WEB-INF/jboss-web.xml:

  <valve>
     <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name>
     <param>
       <param-name>passUserPrincipalToAttributeManager</param-name>
       <param-value>true</param-value>
     </param>
   </valve>


standalone.xml:

    <mapping>
      <mapping-module code="org.jboss.security.mapping.providers.attribute.LdapAttributeMappingProvider" type="attribute">
="java.naming.provider.url" value="ldaps://imatestldapserver.redhat.com"/>
        <module-option name="bindDN" value="uid=imauser,dc=test,dc=redhat,dc=com"/>
        <module-option name="bindCredential" value="imapassword"/>
        <module-option name="baseCtxDN" value="ou=users,dc=test,dc=redhat,dc=com"/>
        <module-option name="baseFilter" value="(uid={0})"/>
        <module-option name="attributeList" value="mail,cn,sn,UserType"/>
        <module-option name="searchTimeLimit" value="10000"/>
      </mapping-module>
    </mapping>
Comment 3 Josef Cacek 2014-05-05 08:28:51 UTC 
Verified in 6.3.0.ER2
Note You need to log in before you can comment on or make changes to this bug.