Revert "Merge pull request #199 from AVENTER-UG/issue_180"

This reverts commit bf64cf217a, reversing
changes made to f022103e31.

This change isn't right -- it an LDAP setup when `group_attribute_is_dn
on` is enabled, which is what this section of code
(bf64cf217a (diff-c05c0daefb48996cbf510b81002b49bcR2230))
is conditionally targeting.  This original PR #199 changed the underlying
LDAP query (eg `user_val`) from looking up the user's DN as a group
attribute in LDAP (eg set via the `group_attribute` directive in nginx)
to looking up the _group's_ DN, which isn't right and won't work.

This PR reverts the previous change to make this work correctly again.

Fwiw, the originally-referenced issue #180 seems to be a completely
different issue, relating to escaping and parentheses.
main
David Beitey 5 years ago
parent bf64cf217a
commit 16d56ea742
  1. 7
      ngx_http_auth_ldap_module.c

@ -2216,7 +2216,6 @@ ngx_http_auth_ldap_check_group(ngx_http_request_t *r, ngx_http_auth_ldap_ctx_t *
ngx_memcpy(gr, val.data, val.len);
gr[val.len] = '\0';
tail_gr = ngx_strchr(gr, ',');
if (tail_gr == NULL) {
ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, "http_auth_ldap: Incorrect group DN: \"%s\"", gr);
ctx->outcome = OUTCOME_ERROR;
@ -2230,9 +2229,9 @@ ngx_http_auth_ldap_check_group(ngx_http_request_t *r, ngx_http_auth_ldap_ctx_t *
if (ctx->server->group_attribute_dn == 1) {
user_val = ngx_pcalloc(
r->pool,
ctx->dn.len + 1);
ngx_memcpy(user_val, ctx->dn.data, ctx->dn.len);
user_val[ctx->dn.len] = '\0';
ctx->user_dn.len + 1);
ngx_memcpy(user_val, ctx->user_dn.data, ctx->user_dn.len);
user_val[ctx->user_dn.len] = '\0';
} else {
user_val = ngx_pcalloc(
r->pool,

Loading…
Cancel
Save