[OPENAM-13169] group names having the same CN but different full Distinguished Name Path Created: 04/Jun/18 Updated: 08/Jun/18 Resolved: 08/Jun/18
|Affects Version/s:||13.5.1, 5.5.1|
|Remaining Estimate:||Not Specified|
|Time Spent:||Not Specified|
|Original Estimate:||Not Specified|
am/OpenAm versions: 5.5.1
|Support Ticket IDs:|
When opening the subject / group / AppAdmin view (where AppAdmin is the group name), the flowing error pops out:
Unable to have groups that have the same name but different OUs. The application we are developing on OpenAM require this.
AM does not operate on LDAP entries but on identity subjects, although the UUID might look like a distinguished name. The 'IdRepo' API is extensible so other sources, like a noSQL database could be plugged in by writing a custom implementation of IdRepo.
The big question is how two different Directory Server entries, uniquely distinguished by their Distinguished Name, could be mapped to two different AM group identity subjects. What should be used to displayed in the console or be used for the UUID?
|Comment by Peter Major [X] (Inactive) [ 04/Jun/18 ]|
This is a known limitation of AM's current data store implementation, it is not a bug. Changing the current behavior would require extensive changes, and should be only considered as an RFE.