https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18947

--- Comment #20 from Martin Renvoize <martin.renvo...@ptfs-europe.com> ---
Hang on.. I just re-read the code again.

So.. it will be binding on the 'user' (not the service user as defined in the
config, but the user whose trying to login).. then as you've got 'update' and
'replicate' enabled that same just bound user will do an ldapsearch upon
themselves.

That doesn't feel right. I bet you're normal koha users don't have search
permissions (even to search for themselves) on the ldap directory (and nor
should they).

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to