mirror of
https://github.com/mainnika/nginx-auth-ldap.git
synced 2026-05-22 15:53:39 +00:00
Fix authentication for user/group validations
This fixes issue #40. User passwords should *always* be checked during authentication (except when a user fails to satisfy given requirements). Previously, the PHASE_CHECK_BIND step of authentication would not check passwords in any LDAP configuration where ``require valid_user`` was not specified (eg using ``require user`` or ``require group``).
This commit is contained in:
@@ -1708,11 +1708,6 @@ ngx_http_auth_ldap_authenticate(ngx_http_request_t *r, ngx_http_auth_ldap_ctx_t
|
||||
}
|
||||
}
|
||||
|
||||
if (ctx->server->require_valid_user == 0) {
|
||||
ctx->phase = PHASE_NEXT;
|
||||
break;
|
||||
}
|
||||
|
||||
/* Initiate bind using the found DN and request password */
|
||||
rc = ngx_http_auth_ldap_check_bind(r, ctx);
|
||||
if (rc == NGX_AGAIN) {
|
||||
|
||||
Reference in New Issue
Block a user