Active Directory 的 LDAP 身份验证将用户 ID 视为区分大小写
我正在一个环境中工作，我们根据活动目录对应用程序用户进行身份验证。该应用程序是运行在WebSphere 上的J2EE 应用程序。
我们有三个森林（A、B 和 C），这三个森林中的两个遇到了问题。应用程序始终以大写形式发送用户 ID，并且身份验证在 B 和 C 区域中始终失败，但在 A 区域中通过。
抛出的错误是 invalidCredentials。
我们对密码进行了双重/三次检查，多次运行测试，使用多个客户端（WebSphere 上的完整应用程序、代码存根（无 WebSphere）、第 3 方 LDAP 浏览器），得到了相同的结果。我们还交叉连接了这些区域，问题始终出现在 B 和 C AD 森林中，当用户名中包含大写字母而不是小写字母时，这些区域会报告 invalidCredentials。
据我在研究中看到的，AD 并不关心在 LDAP 查询中传递的用户 ID 的大小写。知道是什么导致这两个森林似乎区分大小写吗？
I'm working in a environment where we are authenticating our the application users against active directory. The application is a J2EE application running on WebSphere.
We have three forests (A, B and C) and we are encountering a problem with two of the three forests. The application is always sending the userid in uppercase and authentication always fails in the B and C regions but passes in the A region.
Error being thrown is invalidCredentials.
We’ve double/triple checked the passwords, run the tests multiple times, used multiple clients (full application on WebSphere, code stub (no WebSphere), 3rd party LDAP brower) with the same results. We have also cross connected the regions an the problem always follows the B and C AD forests and these regions report invalidCredentials when an uppercase letter is included in the username in place of a lowercase letter.
As far as I can see in my research, AD does not care about the case of the userid being passed in an LDAP query. Any idea what could be causing the two forests to seem to be case sensitive?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
事实证明，我们相信我们已经找到了问题所在。 A 区的森林名称为小写字母，而 B 区和 C 区的森林名称为混合大小写。作为测试，创建了一个混合大小写的新林，但身份验证失败。另一项使用小写名称的森林的测试通过了。
As it turns out, we believe that we have found the problem. The forest name in region A was lower case where as the forest name in regions B and C were mixed case. As a test, a new forest was created with mixed case and the authentication failed. Another test with a forest with a lower case name passed.