Bug #1916
closedLDAP Authentication ignores user naming attribute
0%
Description
Using a User Naming Attribute other than CN does not appear to work. Additionally, LDAP authentication (both Diags-->Authentication, and OpenVPN client auth) seems to ignore "" and anything after an
symbol (that is, user "test" is considered the same as "test@testing.com").
Steps to reproduce:
1) setup an LDAP server. Add user cn=test, with attribute "mail=test@testing.com".
2) Set up pfSense to authenticate against that server.
3) Go to diags-->Authentication. Try to authenticate both as username "test", and as username "test@thisisnonsense". Note how either one works.
4) Change the user naming attribute to "mail".
5) test authentication again, this time with username "test@testing.com".
Expected result:
pfSense should properly authenticate the user by the selected attribute.
What actually happens:
Presumably because @ signs are being ignored, the user is not found and authentication fails.
Tested on pfSense 2.0 in a virtual environment (amd64).
Updated by Chris Buechler almost 14 years ago
- Category set to User Manager / Privileges
- Target version set to 2.0.1
- Affected Version set to 2.0