JBoss retrieves LDAP user's groups only with the "Common Name" (cn), not the Fully Distinguished Name (dn)
Issue
We have a security domain successfully configured to use LDAP. Both authentication and authorization work fine, but we have an issue with the group names returned.
We have two groups in LDAP:
cn=Admin,ou=Dev,ou=Groups,dc=example,dc=com
cn=Admin,ou=Prod,ou=Groups,dc=example,dc=com
When JBoss retrieves the user's groups, we only get "Admin" so we cannot differentiate these two groups.
We need the Fully Distinguished Name returned instead of Common Name
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 5.x
- 6.x
- Windows Active Directory
- Red Hat Directory Server
- Sun Directory Server
- other LDAP servers
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
