Optionally use a "guest user" binding prior to searching real user login in LDAP-based authentication

Review Request #729 — Created Jan. 30, 2009 and submitted

Information

Review Board SVN (deprecated)

Reviewers

As noted in http://reviews.review-board.org/r/704/ some LDAP servers prohibite anonymous searches so binding is needed to perform other operations. But unlike the 704 this solution still allows to use complex LDAP hierarchy where users' "login" strings can't be expressed as a fixed pattern like 'uid=%s,ou=users,dc=example,dc=com'.

 
AH
  1. for (i in ins)
      test
  2. 
      
RO
  1. as a note, with reviewboard 1.0 alpha4 I needed this patch to successfully authenticate against our ldap server so I'm opting for including it into the release.
  2. 
      
chipx86
  1. This seems safe to me. I wish I knew more about LDAP, though.
    
    Committed as r1816.
  2. 
      
Loading...