https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/AAA-51 aaa <p>Currently, duplicate user names can be created. However, authentication code leverages getUser() which implies user name uniqueness. User names should be unique.</p> <p>Operating System: All<br/> Platform: All</p> AAA-51

AAA does not enforce domain-unique user names

Bug Resolved Done Ryan Goulding Ryan Goulding Mon, 20 Jul 2015 17:18:58 +0000 Thu, 21 Mar 2019 11:56:42 +0000 Tue, 17 May 2016 23:01:05 +0000 General 0 0 <p>Further information:</p> <p>In IdmLightProxy.dbAuthenticate() there is an invocation of getUsers(username). The first user returned is the only one that is ever checked. This implies that username should be unique. A unique username is also helpful for audit trail functionality which will be added later.</p> <p><a href="https://git.opendaylight.org/gerrit/#/c/24303/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/24303/</a></p> <p>It was decided to make users unique within the scope of a domain. I.e., there can be two users named ryan, but only one ryan@sdn. ryan@sdn and ryan@coke do not have to refer to the same user.</p> <p>This is still an issue. It should be fixed either in the UserStore or in the UserHandler.</p> <p>This is fixed; a 500 internal server error will occur.</p> <p>This is fixed; a 500 internal server error will occur.</p> Development External issue ID 4022 External issue URL Rank 0|i023sn: