Nemcio/SCM-Manager
1
0
Fork 0
mirror of https://github.com/scm-manager/scm-manager.git synced 2026-03-06 20:30:52 +01:00
Code Issues Packages Projects Releases Activity

ldap user must not be a member of any group

Browse Source
This commit is contained in:
Thorsten Ludewig
2011-05-17 08:39:51 +02:00
parent 74730c1cba
commit fc3bbec1e0
1 changed files with 30 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

53
plugins/scm-auth-ldap-plugin/src/main/java/sonia/scm/auth/ldap/LDAPAuthenticationHandler.java
View File

@@ -178,39 +178,46 @@ public class LDAPAuthenticationHandler implements AuthenticationHandler
config.getAttributeNameMail()).get());
user.setType(TYPE);
// read group of unique names
HashSet<String> groups = new HashSet<String>();
searchControls = new SearchControls();
searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);
searchControls.setReturningAttributes(new String[] { "cn" });
baseDn = config.getUnitGroup() + "," + config.getBaseDn();
NamingEnumeration<SearchResult> searchResult2 =
context.search(baseDn,
"(&(objectClass=groupOfUniqueNames)(uniqueMember="
+ userDn + "))", searchControls);
//
while (searchResult2.hasMore())
try
{
SearchResult sr2 = searchResult2.next();
Attributes groupAttributes = sr2.getAttributes();
Attribute cnAttribute = groupAttributes.get("cn");
if (cnAttribute != null)
// read group of unique names
searchControls = new SearchControls();
searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);
searchControls.setReturningAttributes(new String[] { "cn" });
baseDn = config.getUnitGroup() + "," + config.getBaseDn();
NamingEnumeration<SearchResult> searchResult2 =
context.search(
baseDn,
"(&(objectClass=groupOfUniqueNames)(uniqueMember=" + userDn
+ "))", searchControls);
//
while (searchResult2.hasMore())
{
String cn = (String) cnAttribute.get();
SearchResult sr2 = searchResult2.next();
Attributes groupAttributes = sr2.getAttributes();
Attribute cnAttribute = groupAttributes.get("cn");
if ((cn != null) && (cn.trim().length() > 0))
if (cnAttribute != null)
{
groups.add(cn);
String cn = (String) cnAttribute.get();
if ((cn != null) && (cn.trim().length() > 0))
{
groups.add(cn);
}
}
}
}
//
result = new AuthenticationResult(user, groups);
catch (NamingException e2)
{
logger.debug("groupOfUniqueNames not found: " + e2.getMessage(),
e2);
}
// read dynamic group attribute
getGroups(userAttributes, groups);