CS12: LDAP Cannot Handle List Values for the "Mail:" Field

[sean-horn]

1. Attempt a login on an LDAP configured CS12 system with Manage as a valid user
2. Login fails if LDAP user record mail: field is a list, and not a single string.

As a customer, I would like Chef Server 12 to handle list values for the "mail:" field in user records, as in

mail: ["[email protected]","[email protected]", "[email protected]"]

The code that handles the returned LDAP user record is
https://github.com/chef/oc_erchef/blob/95d80e2af0b143e66c111584ed4626db8cfa6663/apps/oc_chef_wm/src/oc_chef_wm_authn_ldap.erl#L189-L198

The EC11 LDAP module handled it by just taking the first entry found in the mail: list, every time https://github.com/opscode/mixlib-authorization/blob/master/lib/opscode/authentication/strategies/ldap.rb#L124-L137

Rebug Debugging On The Issue Shows

% 13:45:44 <0.3858.11>({mochiweb_acceptor,init,3}) 
% oc_chef_wm_authn_ldap:find_and_authenticate_user(<0.21883.11>, <<"USERNAME">>, <<"**********">>, [{host,"ldap.example.com"}, 
{port,389}, 
{timeout,60000}, 
{bind_dn,"cn=BINDUSER,ou=people,dc=exampe,dc=com"}, 

{bind_password,"******"}, 

{base_dn,"ou=people,dc=example,dc=com"}, 

{login_attribute,"uid"}, 
{encryption,none}])

% 13:45:44 <0.3858.11>({mochiweb_acceptor,init,3}) 
% oc_chef_wm_authn_ldap:find_and_authenticate_user/4 -> {error, 
{badmatch, 
["[email protected]", 
"[email protected]", 
"[email protected]"]}} 
redbug done, timeout - 1 
([email protected])3>

[sean-horn]

ZenDesk 2151 contains all other information including example LDAP user record.