Merge pull request #1725 from keegan/master

Stop LDAP Auth from succeeding without password
This commit is contained in:
Pavel Djundik 2017-12-13 20:20:10 +02:00 committed by GitHub
commit ccd37aba8f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -23,7 +23,7 @@ function ldapAuthCommon(user, bindDN, password, callback) {
} }
function simpleLdapAuth(user, password, callback) { function simpleLdapAuth(user, password, callback) {
if (!user) { if (!user || !password) {
return callback(false); return callback(false);
} }
@ -41,7 +41,7 @@ function simpleLdapAuth(user, password, callback) {
* LDAP auth using initial DN search (see config comment for ldap.searchDN) * LDAP auth using initial DN search (see config comment for ldap.searchDN)
*/ */
function advancedLdapAuth(user, password, callback) { function advancedLdapAuth(user, password, callback) {
if (!user) { if (!user || !password) {
return callback(false); return callback(false);
} }