Hi, I need your advice for a problem related to alias dereferencing with LDAP.
I'm working at the University of Luxemboug and they are using an ldap server with some alias entries in a specific directory but when I try to log in with ldap, i get the error 'Invalid credentials'. If i use instead the directory which contains all the original entries, i can log in without problem but it would allow other users, who are not on the specific directory, to do the same. To resolve this issue, I think that Gitlab should use an updated version of net-ldap (a dependency of omniauth-ldap) which support alias dereferencing. Then, it should be resolved by modifying the file "lib/gitlab/ldap/adapter.rb" and adding the option "deref" with a value like "Net::LDAP::DerefAliases_Always" to the 'ldap.search" call I think. But i didn't managed to make it work. I'm probably missing something. If i run "bundle exec rake gitlab:ldap:check RAILS_ENV=production" in my Gitlab directory, all the user from the specific ldap directory are correctly displayed. Should I fill a feature request for this ? Best regards, Ludovic Schoepps. -- You received this message because you are subscribed to the Google Groups "GitLab" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/gitlabhq/1aa702e0-09b4-472a-b18d-0aaee05660fd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
