RFR: 8275535: Retrying a failed authentication on multiple LDAP servers can lead to users blocked

Martin Balao mbalao at openjdk.java.net
Wed Oct 20 13:49:19 UTC 2021


I'd like to propose a fix for JDK-8275535. This fix reverts the behavior to the state previous to JDK-8160768, where an authentication failure stops from trying other LDAP servers with the same credentials [1]. After JDK-8160768 we have 2 possible loops to stop: the one that iterates over different URLs and the one that iterates over different endpoints (after a DNS query that returns multiple values).

No test regressions observed in jdk/com/sun/jndi/ldap.

--
[1] - https://hg.openjdk.java.net/jdk/jdk/rev/a609d549992a#l2.137

-------------

Commit messages:
 - Initial commit for JDK-8275535.

Changes: https://git.openjdk.java.net/jdk/pull/6043/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=6043&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8275535
  Stats: 8 lines in 1 file changed: 8 ins; 0 del; 0 mod
  Patch: https://git.openjdk.java.net/jdk/pull/6043.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/6043/head:pull/6043

PR: https://git.openjdk.java.net/jdk/pull/6043


More information about the core-libs-dev mailing list