Make AuthProxy LDAP bind code more robust
authorDan Wells <dbw2@calvin.edu>
Thu, 27 Sep 2012 21:35:03 +0000 (17:35 -0400)
committerBill Erickson <berick@esilibrary.com>
Mon, 15 Jul 2013 16:48:04 +0000 (12:48 -0400)
commit34d0347fdeb53f7fad42760cd0f8feb719218523
tree38d45424ae72e6ae39be1b02247facfa46a34067
parent38bf1ce296497c31910723205be16c24f95c84dd
Make AuthProxy LDAP bind code more robust

The existing version of LDAP_Auth.pm assumed that the user's
bind DN could be derived from the base DN, the ID attribute, and
the user's ID.  This is frequently the case, but not always,
particularly in Active Directory setups using sAMAccountName. This
commit instead uses the initial LDAP lookup as the authority for
determining the user's DN.

Signed-off-by: Dan Wells <dbw2@calvin.edu>
Signed-off-by: Bill Erickson <berick@esilibrary.com>
Open-ILS/src/perlmods/lib/OpenILS/Application/AuthProxy/LDAP_Auth.pm