]> git.evergreen-ils.org Git - working/Evergreen.git/commit
Make AuthProxy LDAP bind code more robust
authorDan Wells <dbw2@calvin.edu>
Thu, 27 Sep 2012 21:35:03 +0000 (17:35 -0400)
committerBill Erickson <berick@esilibrary.com>
Mon, 15 Jul 2013 16:35:33 +0000 (12:35 -0400)
commit36ea3a290b5ac52e758feda91212c2cb68d4e9b2
tree1691a8fdc61019e359f31cdfaa5f9850dee0cd40
parentf040814c7507291c388a35a23c8878293a2524e4
Make AuthProxy LDAP bind code more robust

The existing version of LDAP_Auth.pm assumed that the user's
bind DN could be derived from the base DN, the ID attribute, and
the user's ID.  This is frequently the case, but not always,
particularly in Active Directory setups using sAMAccountName. This
commit instead uses the initial LDAP lookup as the authority for
determining the user's DN.

Signed-off-by: Dan Wells <dbw2@calvin.edu>
Signed-off-by: Bill Erickson <berick@esilibrary.com>
Open-ILS/src/perlmods/lib/OpenILS/Application/AuthProxy/LDAP_Auth.pm