supernets/hardlounge
supernets/hardlounge
4
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #1725 from keegan/master

Browse Source 
Stop LDAP Auth from succeeding without password
This commit is contained in:
Pavel Djundik 2017-12-13 20:20:10 +02:00 committed by GitHub
commit ccd37aba8f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/plugins/auth/ldap.js
View File

@ -23,7 +23,7 @@ function ldapAuthCommon(user, bindDN, password, callback) {
} }
function simpleLdapAuth(user, password, callback) { function simpleLdapAuth(user, password, callback) {
if (!user) { if (!user || !password) {
return callback(false); return callback(false);
} }
@ -41,7 +41,7 @@ function simpleLdapAuth(user, password, callback) {
* LDAP auth using initial DN search (see config comment for ldap.searchDN) * LDAP auth using initial DN search (see config comment for ldap.searchDN)
*/ */
function advancedLdapAuth(user, password, callback) { function advancedLdapAuth(user, password, callback) {
if (!user) { if (!user || !password) {
return callback(false); return callback(false);
} }