self-hosted/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2025-07-17 01:42:24 +02:00
Code Issues Releases Activity

[Web] use cn as fallback ldap login

Browse Source
This commit is contained in:
FreddleSpl0it
2024-08-13 12:14:05 +02:00
parent 519d95cb8b
commit 58a5a4578c
1 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
data/web/inc/functions.auth.inc.php
View File

@ -498,7 +498,7 @@ function ldap_mbox_login($user, $pass, $iam_settings, $extra = null){
$ldap_query = $ldap_query->rawFilter($iam_settings['filter']); $ldap_query = $ldap_query->rawFilter($iam_settings['filter']);
} }
$ldap_query = $ldap_query->where($iam_settings['username_field'], '=', $user) $ldap_query = $ldap_query->where($iam_settings['username_field'], '=', $user)
->select([$iam_settings['username_field'], $iam_settings['attribute_field'], 'displayname', 'distinguishedname']); ->select([$iam_settings['username_field'], $iam_settings['attribute_field'], 'displayname', 'distinguishedname', 'cn']);
$user_res = $ldap_query->firstOrFail(); $user_res = $ldap_query->firstOrFail();
} catch (Exception $e) { } catch (Exception $e) {
@ -513,6 +513,8 @@ function ldap_mbox_login($user, $pass, $iam_settings, $extra = null){
} }
try { try {
if (!$iam_provider->auth()->attempt($user_res['distinguishedname'][0], $pass)) { if (!$iam_provider->auth()->attempt($user_res['distinguishedname'][0], $pass)) {
// fallback to cn
if (!$iam_provider->auth()->attempt($user_res['cn'][0], $pass)) {
$_SESSION['return'][] = array( $_SESSION['return'][] = array(
'type' => 'danger', 'type' => 'danger',
'log' => array(__FUNCTION__, $user, '*', $user_res), 'log' => array(__FUNCTION__, $user, '*', $user_res),
@ -520,6 +522,7 @@ function ldap_mbox_login($user, $pass, $iam_settings, $extra = null){
); );
return false; return false;
} }
}
} catch (Exception $e) { } catch (Exception $e) {
// clear $_SESSION['return'] to not leak data // clear $_SESSION['return'] to not leak data
$_SESSION['return'] = array(); $_SESSION['return'] = array();