From 6be5275ef052c4d0475c3563a3d6053fde549070 Mon Sep 17 00:00:00 2001 From: Kevin Connor Date: Mon, 20 Jun 2011 13:09:38 -0700 Subject: [PATCH] Revert "change ldap group lookup when using memberUid to match using name" I had a misunderstanding of the values in {0} and {1}. Both are names. {1} is the shorter username rather than {0} which is the full ldap specifier. This reverts commit 8feb91bb2f6637783b9ffb051776e953b1c5e84c. --- .../main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy b/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy index f0eb9d64d7..db70277f0b 100644 --- a/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy +++ b/war/src/main/webapp/WEB-INF/security/LDAPBindSecurityRealm.groovy @@ -64,7 +64,7 @@ bindAuthenticator(BindAuthenticator2,initialDirContextFactory) { authoritiesPopulator(AuthoritiesPopulatorImpl, initialDirContextFactory, instance.groupSearchBase) { // see DefaultLdapAuthoritiesPopulator for other possible configurations searchSubtree = true; - groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={0}))"; + groupSearchFilter = "(| (member={0}) (uniqueMember={0}) (memberUid={1}))"; } authenticationManager(ProviderManager) { -- GitLab