Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-38717

User Directory Service does not clean provider-supplied EID

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: CLOSED
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.6.x
    • Fix Version/s: 2.6.x, 2.8.x
    • Component/s: Kernel
    • Labels:
      None
    • Previous Issue Keys:
      KNL-263

      Description

      When an EID string is specified directly by a caller, the UserDirectoryService "cleans" it before performing other operations. This includes converting it to lower-case if the installation uses case-insensitive EIDs. However, no such cleaning is done when an EID is supplied by a User Directory Provider (by provided authentication, for example). If the provider returns a mixed-case EID, the UDS stores it unchanged in the SAKAI_USER_ID_MAP table and internal cache, even though all queries expect to deal with lowercase strings. This can result in multiple inconsistencies (see linked issues).

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  dhorwitz David Horwitz
                  Reporter:
                  raydavis Ray Davis (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  3 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Git Source Code