GithubFollow/One-KVM
1
0
Fork 0
mirror of https://github.com/mofeng-git/One-KVM.git synced 2025-12-12 09:10:30 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

check group name in ldap result (#150)

Browse Source
This commit is contained in:
Vladimir Sukhonosov 2023-09-28 01:52:30 +03:00 committed by GitHub
parent 8f32f9ae11
commit 0c4d21f204
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
kvmd/plugins/auth/ldap.py
View File

@ -88,10 +88,10 @@ class Plugin(BaseAuthService):
base=self.__base, base=self.__base,
scope=ldap.SCOPE_SUBTREE, scope=ldap.SCOPE_SUBTREE,
filterstr=f"(&(objectClass=user)(userPrincipalName={user})(memberOf={self.__group}))", filterstr=f"(&(objectClass=user)(userPrincipalName={user})(memberOf={self.__group}))",
attrlist=["userPrincipalName", "memberOf"], attrlist=["memberOf"],
timeout=self.__timeout, timeout=self.__timeout,
) or []): ) or []):
if dn is not None and isinstance(attrs, dict) and attrs.get("memberOf"): if dn is not None and isinstance(attrs, dict) and self.__group.encode() in attrs.get("memberOf"): # type: ignore
return True return True
except ldap.INVALID_CREDENTIALS: except ldap.INVALID_CREDENTIALS:
pass pass