Revision: 1992 Author: olavmrk Date: Fri Nov 13 01:17:37 2009 Log: LDAP: Disallow bind with empty password.
Merged into 1.5 branch from r1986. http://code.google.com/p/simplesamlphp/source/detail?r=1992 Modified: /branches/simplesamlphp-1.5/modules/ldap/lib/ConfigHelper.php ======================================= --- /branches/simplesamlphp-1.5/modules/ldap/lib/ConfigHelper.php Mon Oct 19 04:13:01 2009 +++ /branches/simplesamlphp-1.5/modules/ldap/lib/ConfigHelper.php Fri Nov 13 01:17:37 2009 @@ -167,6 +167,11 @@ assert('is_string($username)'); assert('is_string($password)'); + if (empty($password)) { + SimpleSAML_Logger::info($this->location . ': Login with empty password disallowed.'); + throw new SimpleSAML_Error_Error('WRONGUSERPASS'); + } + $ldap = new SimpleSAML_Auth_LDAP($this->hostname, $this->enableTLS, $this->debug, $this->timeout); if (!$this->searchEnable) { --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "simpleSAMLphp commits" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/simplesamlphp-commits?hl=en -~----------~----~----~----~------~----~------~--~---
