https://issues.apache.org/bugzilla/show_bug.cgi?id=48340
Summary: Binding with user-supplied credentials
Product: Apache httpd-2
Version: 2.2.14
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: P2
Component: mod_authz_ldap
AssignedTo: [email protected]
ReportedBy: [email protected]
Created an attachment (id=24671)
--> (https://issues.apache.org/bugzilla/attachment.cgi?id=24671)
the proposed patch
I'm proposing a patch to use the username and password entered by the user in
the compare phase.
It does something similar to #43792, but differently:
- it uses the dn retreived from server, instead of appending a suffix to
username
- it saves the password in authn_ldap_request_t, as long as needed then wipes
it
It adds a new configuration flag: AuthLDAPBindAsUser
The flag defaults to off, when set to 'on' enable the bind as user behaviour
The patch is against 2.2.14.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
