Hi,

I need your advice for a problem related to alias dereferencing with LDAP.

I'm working at the University of Luxemboug and they are using an ldap 
server with some alias entries in a specific directory but when I try to 
log in with ldap, i get the error 'Invalid credentials'.
If i use instead the directory which contains all the original entries, i 
can log in without problem but it would allow other users, who are not on 
the specific directory, to do the same.

To resolve this issue, I think that Gitlab should use an updated version of 
net-ldap (a dependency of omniauth-ldap) which support alias dereferencing.
Then, it should be resolved by modifying the file 
"lib/gitlab/ldap/adapter.rb" and adding the option "deref" with a value 
like "Net::LDAP::DerefAliases_Always" to the 'ldap.search" call I think.
But i didn't managed to make it work. I'm probably missing something.

If i run "bundle exec rake gitlab:ldap:check RAILS_ENV=production" in my 
Gitlab directory, all the user from the specific ldap directory are 
correctly displayed.

Should I fill a feature request for this ?

Best regards,

Ludovic Schoepps.

-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/1aa702e0-09b4-472a-b18d-0aaee05660fd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to