Commit 995d0f8e authored by Vladimir Homutov's avatar Vladimir Homutov
Browse files

Default binddn is changed to empty string. 

This allows to use anonymous bind, if binddn is not provided. Previous
default setting lead to use of unauthenticated bind, which is usually
disabled in LDAP server configurations.
parent 081d42d5

nginx-ldap-auth-daemon.py

+1 −1
Original line number Diff line number Diff line
@@ -144,7 +144,7 @@ class LDAPAuthHandler(AuthHandler): 
             'url': ('X-Ldap-URL', None),

             'basedn': ('X-Ldap-BaseDN', None),

             'template': ('X-Ldap-Template', '(cn=%(username)s)'),

             'binddn': ('X-Ldap-BindDN', 'cn=anonymous'),

             'binddn': ('X-Ldap-BindDN', ''),

             'bindpasswd': ('X-Ldap-BindPass', ''),

             'cookiename': ('X-CookieName', '')

        }