Not able to integrate Liferay with LDAP and authenticate user if user has space in screen name

• Type: Bug
• Status: Closed
• Resolution: Duplicate
• Affects Version/s: 7.0.X, 7.1.X
• Fix Version/s: None
• Component/s: Application Security > LDAP
• Labels:
  • ee-ts
• Fix Priority: 3
• Git Pull Request: https://github.com/SamZiemer/liferay-portal-ee/pull/373

Description

Liferay allows users to add special characters to their screen names in a portal-ext.property, but after importing users with a space in their screen names through LDAP, those users cannot authenticate. 

Steps to reproduce

1. Insert in portal-ext.properties:

   users.screen.name.special.characters= -._

2. Start a clean bundle of Liferay DXP 7.0 installed with de-50
3. Connect Liferay to an LDAP server using the attached screen shots.
4. Enable Import on LDAP and under the General tab, change so that users authenticate by screen name
5. Create a user in the LDAP server
6. Log in as the user

Results of Testing

Expected Results: You are able to log in as the user
Actual Results: You are not able to log in as the user and you get the following error

Errors/Logs

    2019-05-30 22:18:40.422 ERROR [liferay/scheduled_user_ldap_import-1][LDAPUserImporterImpl:814] Unable to import user CN=Spaceman Spiff: null:null:{cn=cn: Spaceman Spiff}
    com.liferay.portal.kernel.exception.UserScreenNameException$MustValidate: Screen name spaceman spiff for user 32589 must validate with com.liferay.portal.kernel.security.auth.DefaultScreenNameValidator: The screen name cannot be an email address or a reserved word, such as postfix. It must contain only alphanumeric or the following special characters: -._.

See attached file for full error

Master

Not Reproduced -a485def94c33101b96b779aec5f82197380d556f

7.0.x

Reproduced - 8265fa592cd55dc47948917a36162bbfcc70c471

Attachments

LDAP1.png

LDAP2.png

LDAP3.png

LDAP4.png

error.txt