DependencyTrack / DependencyTrack/dependency-track

LDAP authentication username matching appears to be case sensitive

Open
#3,273 0 comments 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

We have the containerized Dependency Track integrated with Active Directory. In Access Management > LDAP Users we have a list of usernames that we've added. When one of those users logs in, the username they enter has to match the case exactly as we have configured here.

E.g. - A user entering this user name:

![image](https://github.com/DependencyTrack/dependency-track/assets/48829375/e76965b1-7c22-45cb-9e67-1d260efe00bf)

Would get an error if their username was configured this way:

![image](https://github.com/DependencyTrack/dependency-track/assets/48829375/8c63a668-bc7c-42c4-bc56-a1d55d10e138)

The error is:

![image](https://github.com/DependencyTrack/dependency-track/assets/48829375/1f81a2e2-c06c-41c8-8e32-8e3079900f72)

To be clear, once the user enters their username to match the case configured in Dependency Track, the login works as expected.

### Steps to Reproduce

1. Configure LDAP integration
2. In Access Management > LDAP Users, create a new user
3. Attempt to login as user using different case than how the username is configured in DTrack.

### Expected Behavior

Dependency Track should do case insensitive matching of login usernames against its list of LDAP users.

### Dependency-Track Version

4.9.1

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

11

### Browser

N/A

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.