[ 
https://issues.apache.org/jira/browse/AIRFLOW-1711?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Steve Jacobs updated AIRFLOW-1711:
----------------------------------
    Description: 
in the LDAP auth module

`group_contains_user` checks for `resp['attributes'].get(user_name_attr)[0] == 
username`

Some Ldaps apparently have this as a simple string

`resp['attributes'].get(user_name_attr) == username` 

also should be checked. 

But really a test should be done to see if the return is a 'list' and perform 
the check differently. If its not a list, python will check both arguments and 
exit with an error. 

  was:
in the LDAP auth module

`group_contains_user` checks for `resp['attributes'].get(user_name_attr)[0] == 
username`

Some Ldaps apparently have this as a simple string

`resp['attributes'].get(user_name_attr) == username` 

also should be checked


> Ldap Attributes not always a "list" part 2
> ------------------------------------------
>
>                 Key: AIRFLOW-1711
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-1711
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: contrib
>    Affects Versions: Airflow 1.7.1
>         Environment: Linux + Active Directory
>            Reporter: Steve Jacobs
>
> in the LDAP auth module
> `group_contains_user` checks for `resp['attributes'].get(user_name_attr)[0] 
> == username`
> Some Ldaps apparently have this as a simple string
> `resp['attributes'].get(user_name_attr) == username` 
> also should be checked. 
> But really a test should be done to see if the return is a 'list' and perform 
> the check differently. If its not a list, python will check both arguments 
> and exit with an error. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to