mirror of
https://github.com/redmine/redmine.git
synced 2025-11-12 00:06:01 +01:00
Do not bind when the account contains $login (#21674).
git-svn-id: http://svn.redmine.org/redmine/trunk@15090 e93f8b46-1217-0410-a6f0-8f06a7374b81
This commit is contained in:
@@ -62,7 +62,7 @@ class AuthSourceLdap < AuthSource
|
|||||||
ldap_con = initialize_ldap_con(self.account, self.account_password)
|
ldap_con = initialize_ldap_con(self.account, self.account_password)
|
||||||
ldap_con.open { }
|
ldap_con.open { }
|
||||||
|
|
||||||
if self.account.present? && self.account_password.present?
|
if self.account.present? && !self.account.include?("$login") && self.account_password.present?
|
||||||
ldap_auth = authenticate_dn(self.account, self.account_password)
|
ldap_auth = authenticate_dn(self.account, self.account_password)
|
||||||
raise AuthSourceException.new(l(:error_ldap_bind_credentials)) if !ldap_auth
|
raise AuthSourceException.new(l(:error_ldap_bind_credentials)) if !ldap_auth
|
||||||
end
|
end
|
||||||
|
|||||||
Reference in New Issue
Block a user