LDAP + PACL causes javax.naming.NotContextException: Not an instance of LdapContext

• Type: Regression Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE, 7.0.0 M3
• Fix Version/s: 6.2.2 CE GA3 , 6.2.X EE, 7.0.0 M3
• Component/s: Application Security > LDAP, Application Security > PACL, Portal Services, Security Vulnerability
• Labels:
  • QA-TP
  • liferay-fixpack-platform-32-6210
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Story Points: 16
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/22330

Steps to reproduce
1. Enable PACL by creating a catalina.policy file in

 ${TOMCAT} /conf 

2. In the file add in

grant {
	permission java.security.AllPermission;
};

This should already be present.

3. In "setenv.sh" under CATALINA_OPS, add in

-Djava.security.manager -Djava.security.policy=$CATALINA_BASE/conf/catalina.policy

4. Add to portal-ext.properties: portal.security.manager.strategy=liferay

5. Start portal with the added flag of "-security" eg "./catalina.sh -security"
6. Enable LDAP by going to Control Panel -> Portal Settings -> Authentication -> LDAP -> Add Server
7. Enter LDAP info for server.
8. Click "Test LDAP Users"

Result: Pop up window is blank and there is an error:

javax.naming.NotContextException: Not an instance of LdapContext 

Expected: Pop up window should show a sample of LDAP users, as it does when PACL is not enabled.