Revision: 1986
Author: olavmrk
Date: Fri Nov 13 00:27:04 2009
Log: LDAP: Disallow bind with empty password.
http://code.google.com/p/simplesamlphp/source/detail?r=1986
Modified:
/trunk/modules/ldap/lib/ConfigHelper.php
=======================================
--- /trunk/modules/ldap/lib/ConfigHelper.php Mon Oct 19 04:13:01 2009
+++ /trunk/modules/ldap/lib/ConfigHelper.php Fri Nov 13 00:27:04 2009
@@ -167,6 +167,11 @@
assert('is_string($username)');
assert('is_string($password)');
+ if (empty($password)) {
+ SimpleSAML_Logger::info($this->location . ': Login with
empty password
disallowed.');
+ throw new SimpleSAML_Error_Error('WRONGUSERPASS');
+ }
+
$ldap = new SimpleSAML_Auth_LDAP($this->hostname,
$this->enableTLS,
$this->debug, $this->timeout);
if (!$this->searchEnable) {
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"simpleSAMLphp commits" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/simplesamlphp-commits?hl=en
-~----------~----~----~----~------~----~------~--~---
