Bug 658307 - LDAP search failed when 'cn' attribute is missing and CN shouldn't be a requirement.
LDAP search failed when 'cn' attribute is missing and CN shouldn't be a requi...
Product: RHQ Project
Classification: Other
Component: Configuration (Show other bugs)
All All
low Severity medium (vote)
: ---
: ---
Assigned To: RHQ Project Maintainer
Mike Foley
Depends On:
Blocks: jon30-bugs
  Show dependency treegraph
Reported: 2010-11-29 18:08 EST by Roger Hui
Modified: 2014-06-30 16:36 EDT (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2014-06-30 16:36:12 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Roger Hui 2010-11-29 18:08:59 EST
Description of problem:
When the CN attribute is missing the group, JOn is unable to pick up the groups. 

Version-Release number of selected component (if applicable):
JON 2.4.0 

How reproducible:
Create a LDAP group that doesn't contain CN attributes, and run the LDAPTestSettings.jar 

You will see null at the groupFilter.
STEP-3:TESTING: This ldap filter (objectclass=groupOfNames) will be used to locate ALL available LDAP groups
STEP-3:FAIL: There was an error searching with the groupFilter supplied: objectclass=groupOfNames'
Actual results:
Null pointer returned. 

Expected results:
It should be able to return a list of groups. 

Additional info:
There is a workaround, try to modify the 'group filter' entry to have LDAP exclusion logic to hide those groups from the RHQ LDAP search. Ex. &(objectclass=groupOfNames)(!cn='') The only problem with this approach is that this is a large amount of groups.
Comment 1 Roger Hui 2010-11-29 18:10:03 EST
Here is the case for more details: 00382109
Can we get it fixed in 2.4.1?
Comment 2 Charles Crouch 2011-09-30 13:49:48 EDT
removing superfluous trackers

Note You need to log in before you can comment on or make changes to this bug.