projects / working / Evergreen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4340597) | patch
auth_proxy: optionally restrict auth by home OU user/jeffdavis/auth_proxy_restrict_by_home_ou
authorJeff Davis <jeff.davis@bc.libraries.coop>
Fri, 8 Feb 2019 21:59:14 +0000 (13:59 -0800)
committerJeff Davis <jeff.davis@bc.libraries.coop>
Fri, 8 Feb 2019 21:59:14 +0000 (13:59 -0800)
commit1a8abc4db0df72313990bc32109e59d01f4df909
treefd1e5c27085988476e0379c685c3f226554cf43ftree
parent43405971832887b5cbe75b6eb2421dd1b09a1bafcommit | diff
auth_proxy: optionally restrict auth by home OU

This adds a new restrict_by_home_ou setting to auth_proxy.  When enabled,
if the login request includes an org param, auth_proxy will refuse to
authenticate a user unless their home OU matches or is a descendant of
that org.

Signed-off-by: Jeff Davis <jeff.davis@bc.libraries.coop>
Open-ILS/examples/opensrf.xml.example diff | blob | history
Open-ILS/src/perlmods/lib/OpenILS/Application/AuthProxy.pm diff | blob | history
Evergreen ILS