mirror of
https://github.com/redmine/redmine.git
synced 2025-11-10 15:26:03 +01:00
Do not bind when the account contains $login (#21674).
git-svn-id: http://svn.redmine.org/redmine/trunk@15090 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
@@ -62,7 +62,7 @@ class AuthSourceLdap < AuthSource
|
||||
ldap_con = initialize_ldap_con(self.account, self.account_password)
|
||||
ldap_con.open { }
|
||||
|
||||
if self.account.present? && self.account_password.present?
|
||||
if self.account.present? && !self.account.include?("$login") && self.account_password.present?
|
||||
ldap_auth = authenticate_dn(self.account, self.account_password)
|
||||
raise AuthSourceException.new(l(:error_ldap_bind_credentials)) if !ldap_auth
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user