tyler.durden
/
icingaweb2
mirror of https://github.com/Icinga/icingaweb2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Do not interrupt authentication chain on invalid ldap connection infos 

Catch LdapExceptions and throw AuthenticationException to not interrupt authentication chain

fixes #7497
This commit is contained in:
Matthias Jentsch 2014-11-04 12:35:41 +01:00
parent 18bd49e636
commit f9fee2df70
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
library/Icinga/Authentication/Backend/LdapUserBackend.php
View File

@ -68,8 +68,16 @@ class LdapUserBackend extends UserBackend
*/
public function assertAuthenticationPossible()
{
$q = $this->conn->select()->from($this->userClass);
$result = $q->fetchRow();
try {
$q = $this->conn->select()->from($this->userClass);
$result = $q->fetchRow();
} catch (LdapException $e) {
throw new AuthenticationException(
'Connection not possible: %s',
$e->getMessage()
);
}
if (! isset($result)) {
throw new AuthenticationException(
'No objects with objectClass="%s" in DN="%s" found.',
@ -158,7 +166,7 @@ class LdapUserBackend extends UserBackend
} catch (AuthenticationException $e) {
// Authentication not possible
throw new AuthenticationException(
'Authentication against backend "%s" not possible: ',
'Authentication against backend "%s" not possible: %s',
$this->getName(),
$e
);