tree 2f02db0c96b2f21f18c851ce82c9e0e36573496a
parent 69570e5eb4114348ab6897a62138fe58336fb53f
author Jiaqing Zhao <jiaqing.zhao@intel.com> 1653988291 +0800
committer Jiaqing Zhao <jiaqing.zhao@intel.com> 1665473995 +0800
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEuUrOwkL4eKsvYjyyk2yETDPkVWIFAmNFHiUACgkQk2yETDPk
 VWKplw/9EHTv1DwcFRfqKVzGhYRG+m1nL4h4Tq4G2NLd8m6/DdtYyOof+YCv2aBO
 BuJwEA+2wJiZU6yeA713Vfhct9tQO9AnSy4zHMnkotXrI7e/p32a7YbGB4g9YvAd
 81rkNaQ1G3G7fuNYu1dRNJ4/MdbLa3FHyD2FRRVCA1hTTyUjeQhWmRewuhXXWg8b
 JXgFz5uGvZ0nkU3wo6sUZtT17ynHxOzfPUafdpczX5z/0qfbY55xcn/fOTywMvX1
 5XsgAjrZq9i1TlEZlHmkzilrtFWqYBqx2UM1X6DHt95NImscRir+4EnWY373MW/3
 9eHXwvQzFllLfZQA8lFDbvzYgaSVf4obXViiDtaFbQnt3aLZUYbJQb3BUQY/gn22
 b3CLZh5lkmxXXCGdTGIupk/QqVoM06m3gR3K+xDvk8l51WE8v3ioaCIKrwI+bfp5
 IGTHcmtHxyf3QIFj8xTQzWWGnjgLMvOZ/Su5x+GWka9ym+upMf2Z5rJheHAErrmc
 7FFZrcNZ6ERSeIFoV5aNtA23wH8XeaMeW+NykVrAYaN9XrNENi3ln3M1Q1dzxB9p
 T2ncY/1hi9A4k5LgDO4ZQOSg0Pj1AohCb8APBK7F3UgBvWU4utJBCJwkK/S/lo+v
 uNWdtD0xQZbnmR4hA1GK+dOuNsXWLN5e/WC4Hh/hXOX1Y+ez9cc=
 =oOPx
 -----END PGP SIGNATURE-----

Check LDAP group name after PrivilegeMapperEntry fully parsed

Current code checks if the LDAP group name matches when looping through
the PrivilegeMapperEntry interface. When GroupName is parsed first, it
may assign a wrong Privilege value to the group. This patch fixes such
issue by checking the LDAP group name after a mapping entry is fully
parsed, and also exits the loop after match to improve performance.

Tested:
Verified correct group privilege is returned when multiple mapping
entries are configured.

Change-Id: I4795e3f1f974624bb2b46c40ccd729e259512ce4
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@intel.com>