Hello,

Is there a way to prevent user to log with there email? I set LDAP 
authentication, I create a username field on custom auth_user model and set 
auth.define_tables(username=True)

But I notice that I can still login with [email protected]. In this case, 
ldap_auth create a new user with first_name and username = [email protected]

So, I think there is a flaw here in ldap_auth :

if ldap_mode == 'ad':
                # Microsoft Active Directory
                if '@' not in username:
                    domain = []
                    for x in ldap_basedn.split(','):
                        if "DC=" in x.upper():
                            domain.append(x.split('=')[-1])
                    username = "%s@%s" % (username, '.'.join(domain))
                username_bare = username.split("@")[0]

Since it seems to recreate email as username...

Thanks

Richard

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to