Tim Vernum da7560a079 [Security] Correct DN matches in role-mapping rules (elastic/x-pack-elasticsearch#3704) ...

Changes the behaviour of the role mapping API to perform a "DistinguishedNameMatch"
when the field is a DN. This is achieved by moving the responsibility for defining
the matching rules from the expression to the data (ExpressionModel)

Because the role mapping API is used within the SAML realm, which may or may not be
using DNs, this implementation assumes that the "dn" and "groups" should be
compared as DNs if they parse as a DN.
For SAML this behaviour will generally do the right thing, as members of the "groups"
field might be DNs (if the data is sourced from an LDAP directory) but often will not be.

Original commit: elastic/x-pack-elasticsearch@3a4dfbba79

2018-01-30 15:47:17 +11:00

..

forbidden

[Security] Add SAML authentication support (elastic/x-pack-elasticsearch#3646)

2018-01-21 08:43:00 +10:00

licenses

Build: Fix third party audit task for xpack core (elastic/x-pack-elasticsearch#3656)

2018-01-22 22:58:34 -08:00

src

[Security] Correct DN matches in role-mapping rules (elastic/x-pack-elasticsearch#3704)

2018-01-30 15:47:17 +11:00

build.gradle

Build: Replace references to x-pack-elasticsearch paths with helper methods (elastic/x-pack-elasticsearch#3748)

2018-01-26 21:48:30 -08:00