LDAP and Windows AD · lmenezes/cerebro#392

(1 评论) (0 反应) (0 负责人)JavaScript (5,411 star) (721 fork)batch import

bughelp wanted

描述

I have LDAP working with Windows AD using mail as user-attr.

Recently I changed mail address in Windows user accounts and now they cannot access Cerebro using LDAP. They get a user/password error.

After doing some tests I found that Cerebro LDAP (using mail as user attribute) only works if mail and UPN attributes matches in AD. Another combination fails to authenticate.

This is the actual configuration I use: type: ldap method = "simple" user-template = "%s" user-attr = "mail"

Could it be an issue with Cerebro LDAP config?

Thanks.

贡献者指南

技术栈: javascriptnodejs
领域: backendauthentication
议题类型: bug
难度: 3
预计时间: 1-2 days
活动状态: stale
清晰度: mostly clear
前置要求: LDAP basicsWindows Active DirectoryCerebro authentication config
新手友好度: 35
研究方向: Investigate the LDAP authentication module in the Cerebro source code, specifically how user attr and user template are used to construct the bind DN. The issue suggests a mismatch when mail and UPN differ, so check if the code assumes they are identical. Look for the search filter and binding logic in files like server/authentication/ldap.js. Consider testing with a Windows AD environment where mail and UPN are different to confirm the bug. Then propose a fix that uses the specified user attr consistently for authentication.