Browse Source

SEC-1223: Added break to bindWithDnLoop when non-null use is returned.

3.0.x
Luke Taylor 17 years ago
parent
commit
d47abbc35f
  1. 4
      ldap/src/main/java/org/springframework/security/ldap/authentication/BindAuthenticator.java

4
ldap/src/main/java/org/springframework/security/ldap/authentication/BindAuthenticator.java

@ -80,6 +80,10 @@ public class BindAuthenticator extends AbstractLdapAuthenticator { @@ -80,6 +80,10 @@ public class BindAuthenticator extends AbstractLdapAuthenticator {
// If DN patterns are configured, try authenticating with them directly
for (String dn : getUserDns(username)) {
user = bindWithDn(dn, username, password);
if (user != null) {
break;
}
}
// Otherwise use the configured search object to find the user and authenticate with the returned DN.

Loading…
Cancel
Save