How would you change this?

On Monday, 5 August 2013 15:42:39 UTC-5, Richard wrote:
>
> Hello,
>
> Is there a way to prevent user to log with there email? I set LDAP 
> authentication, I create a username field on custom auth_user model and set 
> auth.define_tables(username=True)
>
> But I notice that I can still login with [email protected] <javascript:>. 
> In this case, ldap_auth create a new user with first_name and username = 
> [email protected] <javascript:>
>
> So, I think there is a flaw here in ldap_auth :
>
> if ldap_mode == 'ad':
>                 # Microsoft Active Directory
>                 if '@' not in username:
>                     domain = []
>                     for x in ldap_basedn.split(','):
>                         if "DC=" in x.upper():
>                             domain.append(x.split('=')[-1])
>                     username = "%s@%s" % (username, '.'.join(domain))
>                 username_bare = username.split("@")[0]
>
> Since it seems to recreate email as username...
>
> Thanks
>
> Richard
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to