Skip to content

[FIX] LDAP was accepting login with empty passwords for certain AD configurations#11264

Merged
rodrigok merged 1 commit intodevelopfrom
ldap-login-empty
Jun 26, 2018
Merged

[FIX] LDAP was accepting login with empty passwords for certain AD configurations#11264
rodrigok merged 1 commit intodevelopfrom
ldap-login-empty

Conversation

@rodrigok
Copy link
Copy Markdown
Member

Closes #11017

@rodrigok rodrigok merged commit 602c24f into develop Jun 26, 2018
@rodrigok rodrigok deleted the ldap-login-empty branch June 26, 2018 18:37
@rodrigok rodrigok mentioned this pull request Jun 28, 2018
Copy link
Copy Markdown
Contributor

@sscholl sscholl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This probably generates a LDAP request using the user dn as login and not the configured LDAP admin account.

const searchOptions = {
scope: this.options.User_Search_Scope || 'sub'
};
const result = this.searchAllSync(dn, searchOptions);
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This probably generates a LDAP request using the user dn as login and not the configured LDAP admin account.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants