Details
Description
After JDK-8160768, the behavior upon a failed LDAP authentication changed: instead of aborting the operation with an AuthenticationException exception, all available LDAP servers are tried with the same credentials. Note that the credentials might be wrong because of an error when the user entered them (i.e.: a typo). If this is the case, the user may be blocked on all LDAP servers after a single operation because of exceeding the maximum number of authentication failures. In my view, an authentication error means that the LDAP server is alive and there is no need to iterate to a different endpoint.
Attachments
Issue Links
- csr for
-
JDK-8276959 Retrying a failed authentication on multiple LDAP servers can lead to users blocked
-
- Closed
-
- relates to
-
JDK-8160768 Add capability to custom resolve host/domain names within the default JNDI LDAP provider
-
- Resolved
-