Bug #7967
closed
LDAP User Naming Attribuite override isn't used in pfSense 2.4
0%
Description
Version 2.4 Authentication Servers page, User Naming Attribute is set to something other than CN. In my case the LDAP server uses "UID" instead of "CN" but the ldap query is still sent with CN= instead of "UID= " resulting in a query that returns 0 results thus all authentications fail.
Updated by Chris Linstruth about 8 years ago
I have been unable to duplicate this. A configured LDAP server here uses uid and the query is properly-filtered with (uid=username).
Please raise this issue on the forum and return if an actual problem is located.
Updated by Jim Pingle about 8 years ago
- Status changed from New to Not a Bug
- Priority changed from Very High to Normal
The LDAP user naming attribute is read from the configuration and CN is not hardcoded, so it can only be from something else in the configuration.
https://github.com/pfsense/pfsense/blob/master/src/etc/inc/auth.inc#L1298
https://github.com/pfsense/pfsense/blob/master/src/etc/inc/auth.inc#L1143