SEC-2308: DefaultSpringSecurityContextSource allow empty baseUrl

2013-09-13 15:53:35 -07:00
parent f6587c8697
commit b4cbcee7f0
2 changed files with 14 additions and 3 deletions
--- a/ldap/src/main/java/org/springframework/security/ldap/DefaultSpringSecurityContextSource.java
+++ b/ldap/src/main/java/org/springframework/security/ldap/DefaultSpringSecurityContextSource.java
@@ -123,9 +123,6 @@ public class DefaultSpringSecurityContextSource extends LdapContextSource {
            if ("".equals(trimmedUrl)) {
                continue;
            }
-            if (trimmedUrl.contains(trimmedBaseDn)) {
-                throw new IllegalArgumentException("LDAP URL string must not include the base DN! '" + trimmedUrl + "'");
-            }

            providerUrl.append(trimmedUrl);
            if (! trimmedUrl.endsWith("/")) {