Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-08 17:13:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check for empty password in LDAP authentication

Browse Source
This commit is contained in:
ritt 2022-02-10 17:47:12 +01:00
parent 1ebfd06cf5
commit d2b89fb7fc
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/auth.c
View File

@ -258,8 +258,14 @@ int auth_verify_password_ldap(LOGBOOK *lbs, const char *user, const char *passwo
ldap_ld = NULL; ldap_ld = NULL;
memset(&ldap_bindDN[0], 0, sizeof(ldap_bindDN)); memset(&ldap_bindDN[0], 0, sizeof(ldap_bindDN));
if(!ldap_init(lbs,error_str,error_size)) { if (!strcmp(password, "")) {
strlcpy(error_str, "<b>LDAP authentication failed, no password provided</b>", error_size);
write_logfile(lbs, "LDAP authentication failed, no password provided");
return FALSE;
}
if (!ldap_init(lbs,error_str, error_size)) {
strlcpy(error_str, "<b>LDAP initialization error</b><br>", error_size); strlcpy(error_str, "<b>LDAP initialization error</b><br>", error_size);
strlcat(error_str, "<br>Please check your LDAP configuration.", error_size); strlcat(error_str, "<br>Please check your LDAP configuration.", error_size);
return FALSE; return FALSE;