AbsaOSS / AbsaOSS/enceladus

Investigate why LDAP Channel Binding breaks authentication

Aperta
#2,220 1 commento 0 reazioni 0 assegnatari Vedi su GitHub
bug Menas priority: high security
Lingua principale
Scala
Stelle
33
Fork
16
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

## Describe the bug
When LDAP Channel Binding is switched on on the server, it breaks authentication of Menas

## Expected behavior
LDAP Channel Binding setup does not break the application

## Screenshots
```bash
[WARN] 2024-09-10 20:04:48,754 [https-openssl-apr-8443-exec-1] za.co.absa.enceladus.menas.auth.MenasAuthenticationFailureHandler - Authentication exception
za.co.absa.enceladus.menas.auth.exceptions.BadLdapHostException: java.security.PrivilegedActionException: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090346: LdapErr: DSID-0C0905E4, comment: AcceptSecurityContext error, data 80090346, v3839^@]
```

```bash
[INFO]  2024-08-23 05:02:26,121 [main] org.springframework.ldap.core.support.AbstractContextSource - Property 'userDn' not set - anonymous context will be used for read-write operations
[INFO]  2024-08-23 05:29:07,914 [https-openssl-apr-8443-exec-8] org.springframework.ldap.core.support.AbstractContextSource - Property 'userDn' not set - anonymous context will be used for read-write operations
```

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.