-
Bug
-
Resolution: Fixed
-
P3
-
6, 6u21, 7
-
None
-
b123
-
generic
-
generic
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-2199374 | 6u23 | Robert Mckenna | P2 | Resolved | Fixed | b02 |
JDK-2199373 | 6u22m | Robert Mckenna | P2 | Resolved | Fixed | b02 |
JDK-2198414 | 6u22-rev | Robert Mckenna | P2 | Resolved | Fixed | b06 |
JDK-2198677 | 6u21-crev | Robert Mckenna | P2 | Resolved | Fixed | b07 |
JDK-2200476 | 6u21 | Sean Coffey | P3 | Closed | Fixed | b50 |
The original e-mail that requests to address the compatibility:
"DIP provisioning functionality for version 3 profiles is broken after uptake of JDK update 21 (JDK6_MAIN_LINUX_100622.1.6.0.21.B06). The issue is due to a fix made by JNDI team in update 21 (http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6916202). They have basically included some additional checks for some invalid search filters.
The issue now that we are hitting is that, whenever we issue a search query with attribute/subtype containing "underscore"( _ ), JNDI throws invalid filter exception. This was working fine till update 20 and only after uptake of update 21, we are hitting this.
Sample filter: (orcluserapplnprovstatus;EMAIL_email=PROVISIONING_FAILURE)
Since we are using EMAIL_email in the subtype part (containing underscore), JNDI now throws InvalidFilterException and provisioning functionality is broken. I searched the RFCs but could not find any reference mentioning "underscore" is invalid in the subtype part in the search filter. So, not sure why this check is introduced now.
Also, the back-end server is not complaining anything and we have
using this type of searches for quite a few releases. I tried in DSEE also and
DSEE also allows to add attributes with underscore in subtypes.
This has a serious impact for DIP and needs to be addressed ASAP. The issue is easily reproducible with any search filter containing underscore in the subtype part.
Can you please route/escalate this appropriately so that we can try to get the fix quickly?"
- backported by
-
JDK-2198414 to have ldap filters tolerate underscore character in object identifier
-
- Resolved
-
-
JDK-2198677 to have ldap filters tolerate underscore character in object identifier
-
- Resolved
-
-
JDK-2199373 to have ldap filters tolerate underscore character in object identifier
-
- Resolved
-
-
JDK-2199374 to have ldap filters tolerate underscore character in object identifier
-
- Resolved
-
-
JDK-2200476 to have ldap filters tolerate underscore character in object identifier
-
- Closed
-
- duplicates
-
JDK-6979700 tighten the attribute sytax check for JNDI/LDAPFrom the reporter
-
- Closed
-
- relates to
-
JDK-6916202 More cases of invalid ldap filters accepted and processed
-
- Resolved
-