Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-2628

Case insensitivity for realms is not enforced in AuthenticateToRealmCondition.getConditionDecision

    XMLWordPrintable

    Details

    • Rank:
      1|hznyyv:

      Description

      From Ticket:
      I've configured a realm which is in camelcase notation and a policy which checks if the user is authenticated in the realm. This leads to and endless loop because the conditions fails (see part of Policy log). Is this somehow configurable or should I create realms in lowercase only?

      amPolicy:07/02/2013 10:45:02:655 AM BST: Thread[http-443-9,5,main]
      At AuthenticateToRealmCondition.getConditionDecision():authenticateToRealm = /CamelCase,requestAuthnRealms = [/camelcase], allowed = false

      Realms should be case insensitive,
      the AuthenticateToRealmCondition.getConditionDecision() has a check requestAuthnRealms.contains(authenticateToRealm) that is case sensitive.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              markdr Mark de Reeper
              Reporter:
              jonthomas Jonathan Thomas
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: