Projet

Général

Profil

0001-ldap-serverctrls-can-be-empty-on-non-comformant-LDAP.patch

Benjamin Dauvergne, 23 mai 2022 16:15

Télécharger (1,3 ko)

Voir les différences: 

Subject: [PATCH] ldap: serverctrls can be empty on non comformant LDAP
 directories(#65604)

Example of such a non-conforming directory is the slapd-meta backend of
OpenLDAP, it accepts SimplePagedSearch control with criticality=True
set, but do not honor it apart from the response size which respects the
given page size.

 src/authentic2/backends/ldap_backend.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
src/authentic2/backends/ldap_backend.py
1619 1619 
            first_pass = False
1620 1620 
            msgid = conn.search_ext(*args, serverctrls=[pg_ctrl], **kwargs)
1621 1621 
            dummy_result_type, data, msgid, serverctrls = conn.result3(msgid)
1622 
            pg_ctrl.cookie = serverctrls[0].cookie
1623 1622 
            yield from cls.normalize_ldap_results(data)
1623 
            if not len(serverctrls):
1624 
                break
1625 
            pg_ctrl.cookie = serverctrls[0].cookie
1624 1626 

  		




  1625
  1627
  
    
    @classmethod

  		




  1626
  1628
  
    
    def get_users_for_block(cls, block):

  		




  1627
  
  
    
-