nginx-ldap

nginx-ldap copied to clipboard

Make search query configurable

1

Currently, the search base is hardcoded: `data = ldap_connection.search_s([...], filterstr='(&(objectClass=user)(sAMAccountName=' + user + '))')` This may be fine for Active Directory, but unusable on standard LDAP schemas like iNetOrgPerson, account,...

ConsoleCriminal

User and Group access enforcement not working

2

Hi! I've implemented your nginx-ldap-auth module and it authenticates pretty well, nice job! The only issue is, when I'm trying to set up authorization (user and group access enforcement), it's...

xomka686

Right now, checking of the SSL certificate of the LDAP server is hardcoded disabled: ` ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_NEVER)` This barely adds much security at all, except for the connection itself being...

ConsoleCriminal

When a wrong password was provided _check_auth_ returns with false. But when a wrong username was provided there is an unhandled error: ``` ... ldap_connection.simple_bind_s(data['distinguishedName'][0], passwd) TypeError: list indices must...

arkigabor