fixed ldap security issue, thanks demetrio
This commit is contained in:
@@ -1 +1 @@
|
|||||||
Version 2.2.1 (2012-11-17 22:28:15) stable
|
Version 2.2.1 (2012-11-23 08:01:16) stable
|
||||||
|
|||||||
@@ -432,6 +432,8 @@ def ldap_auth(server='ldap', port=None,
|
|||||||
if not do_manage_groups(username, password):
|
if not do_manage_groups(username, password):
|
||||||
return False
|
return False
|
||||||
return True
|
return True
|
||||||
|
except ldap.INVALID_CREDENTIALS, e:
|
||||||
|
return False
|
||||||
except ldap.LDAPError, e:
|
except ldap.LDAPError, e:
|
||||||
import traceback
|
import traceback
|
||||||
logger.warning('[%s] Error in ldap processing' % str(username))
|
logger.warning('[%s] Error in ldap processing' % str(username))
|
||||||
|
|||||||
Reference in New Issue
Block a user