From eb702466bf3ec41a0b2846e650ad476865bdd4ae Mon Sep 17 00:00:00 2001 From: Robert von Burg Date: Fri, 25 Sep 2020 16:36:39 +0200 Subject: [PATCH] [Fix] validate username case-insensitive --- .../li/strolch/privilege/handler/BaseLdapPrivilegeHandler.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/li.strolch.privilege/src/main/java/li/strolch/privilege/handler/BaseLdapPrivilegeHandler.java b/li.strolch.privilege/src/main/java/li/strolch/privilege/handler/BaseLdapPrivilegeHandler.java index 8ed731d6f..740c7fe17 100644 --- a/li.strolch.privilege/src/main/java/li/strolch/privilege/handler/BaseLdapPrivilegeHandler.java +++ b/li.strolch.privilege/src/main/java/li/strolch/privilege/handler/BaseLdapPrivilegeHandler.java @@ -147,7 +147,7 @@ public abstract class BaseLdapPrivilegeHandler extends DefaultPrivilegeHandler { protected void validateLdapUsername(String username, Attributes attrs) throws NamingException { Attribute sAMAccountName = attrs.get("sAMAccountName"); - if (sAMAccountName == null || !username.equals(sAMAccountName.get().toString())) + if (sAMAccountName == null || !username.toLowerCase().equals(sAMAccountName.get().toString().toLowerCase())) throw new AccessDeniedException( "Could not login with user: " + username + this.domain + " on Ldap: Wrong LDAP Data"); }