fixed ldap security issue, thanks demetrio
This commit is contained in:
@@ -1 +1 @@
|
||||
Version 2.2.1 (2012-11-17 22:28:15) stable
|
||||
Version 2.2.1 (2012-11-23 08:01:16) stable
|
||||
|
||||
@@ -432,6 +432,8 @@ def ldap_auth(server='ldap', port=None,
|
||||
if not do_manage_groups(username, password):
|
||||
return False
|
||||
return True
|
||||
except ldap.INVALID_CREDENTIALS, e:
|
||||
return False
|
||||
except ldap.LDAPError, e:
|
||||
import traceback
|
||||
logger.warning('[%s] Error in ldap processing' % str(username))
|
||||
|
||||
Reference in New Issue
Block a user