0001-ldap-allow-multivalued-attributes-in-user_attributes.patch

Loïc Dachary, 25 février 2021 16:07

Voir les différences: en ligne côte à côte

Subject: [PATCH] ldap: allow multivalued attributes in user_attributes
 (#51453)

Fixes: #51453

License: MIT

 src/authentic2/backends/ldap_backend.py | 13 ++++++++++---
 tests/test_ldap.py                      | 16 ++++++++++++++++
 2 files changed, 26 insertions(+), 3 deletions(-)

     from authentic2.a2_rbac.utils import get_default_ou
     from authentic2.ldap_utils import FilterFormatter
     from authentic2.utils import to_list
     from authentic2.custom_user.models import get_attributes_map
     from authentic2.backends import is_user_authenticable
-...
                 if not from_ldap or not to_user:
                     continue
                 from_ldap = from_ldap.lower()
                 if not attributes.get(from_ldap):
                     user_attributes[to_user] = ''
                 attribute_info = get_attributes_map().get(to_user)
                 if not attribute_info:
                     raise AttributeError(to_user)
                 if attribute_info.multiple:
                     user_attributes[to_user] = attributes.get(from_ldap, [])
                 else:
                     user_attributes[to_user] = attributes[from_ldap][0]
                     if not attributes.get(from_ldap):
                         user_attributes[to_user] = ''
                     else:
                         user_attributes[to_user] = attributes[from_ldap][0]
             for name in user_attributes:
                 value = getattr(user.attributes, name, None)
                 if value != user_attributes[name]:

                     'from_ldap': 'l',
                     'to_user': 'locality',
                 },
+                {
                     'from_ldap': 'o',
                     'to_user': 'org',
                 },
+            ]
         }]
-...
             asked_on_registration=False,
             multiple=False)
         # create a org attribute
         models.Attribute.objects.create(
             label='org',
             name='org',
             kind='string',
             required=False,
             user_visible=True,
             user_editable=False,
             asked_on_registration=False,
             multiple=True)
         client.post('/login/',
+                    {
                         'login-password-submit': '1',
-...
         username = u'%s@ldap' % USERNAME
         user = User.objects.get(username=username)
         assert user.attributes.locality == u'Paris'
         assert sorted(user.attributes.org) == [u'EE', u'EO']
         client.session.flush()
         for i in range(5):
             client.post('/login/',
+    -

Projet

Général

Profil

Produits Entr'ouvert » Authentic 2

0001-ldap-allow-multivalued-attributes-in-user_attributes.patch