Bug 122365 - Allow installation definable LDAP filters
r,a=justdave git-svn-id: svn://10.0.0.236/trunk@144823 18797224-902f-48f8-a5cc-f745e15eee43
This commit is contained in:
@@ -84,7 +84,7 @@ sub authenticate {
|
||||
# We've got our anonymous bind; let's look up this user.
|
||||
$mesg = $LDAPconn->search( base => Param("LDAPBaseDN"),
|
||||
scope => "sub",
|
||||
filter => Param("LDAPuidattribute") . "=$username",
|
||||
filter => '(&(' . Param("LDAPuidattribute") . "=$username)" . Param("LDAPfilter") . ')',
|
||||
attrs => ['dn'],
|
||||
);
|
||||
return (AUTH_LOGINFAILED, undef, "lookup_failure")
|
||||
@@ -102,7 +102,7 @@ sub authenticate {
|
||||
# mail attribute for this user.
|
||||
$mesg = $LDAPconn->search( base => Param("LDAPBaseDN"),
|
||||
scope => "sub",
|
||||
filter => Param("LDAPuidattribute") . "=$username",
|
||||
filter => '(&(' . Param("LDAPuidattribute") . "=$username)" . Param("LDAPfilter") . ')',
|
||||
);
|
||||
my $user_entry = $mesg->shift_entry if !$mesg->code && $mesg->count;
|
||||
if(!$user_entry || !$user_entry->exists(Param("LDAPmailattribute"))) {
|
||||
|
||||
@@ -388,6 +388,14 @@ sub check_loginmethod {
|
||||
default => 'mail'
|
||||
},
|
||||
|
||||
{
|
||||
name => 'LDAPfilter',
|
||||
desc => 'LDAP filter to AND with the <tt>LDAPuidattribute</tt> for ' .
|
||||
'filtering the list of valid users.',
|
||||
type => 't',
|
||||
default => '',
|
||||
},
|
||||
|
||||
{
|
||||
name => 'loginmethod',
|
||||
desc => 'The type of login authentication to use:
|
||||
|
||||
Reference in New Issue
Block a user