finn/forgejo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

LDAP: Fetch attributes in Bind DN context option

Browse source 
This is feature is workaround for #2628 (JumpCloud) and some other services
that allow LDAP search only under BindDN user account, but not allow any LDAP
search query in logged user DN context.

Such approach is an alternative to minimal permissions security pattern for
BindDN user.
This commit is contained in:
Adam Strzelecki 2016-02-16 12:33:16 +01:00
parent e2f95c2845
commit 834d92a47b
5 changed files with 37 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

1
routers/admin/auths.go
View file

@ -81,6 +81,7 @@ func parseLDAPConfig(form auth.AuthenticationForm) *models.LDAPConfig {
AttributeName: form.AttributeName,
AttributeSurname: form.AttributeSurname,
AttributeMail: form.AttributeMail,
AttributesInBind: form.AttributesInBind,
Filter: form.Filter,
AdminFilter: form.AdminFilter,
Enabled: true,