gitlab-org--gitlab-foss/lib/gitlab
Elias Mårtenson bc8a875df1 When looking up a user by DN, use single scope
The blocked? method is used to check whether a user exists in LDAP. Prior to this change, if the LDAP server had more objects below the one pointed to by the DN, those objects would also be picked up by the search, causing the method to determine the user should be blocked.

One case where this can happen is when using Active Directory and a user have a mobile phone assigned. In this case, Exchange will add an entry called ExchangeActiveSyncDevices under the users entry. The user-visible behaviour is then that a user loses Gitlab access when he enables a mobile device.

This fix sets the search scope to BaseObject in order to ensure that only the user itself is returned.
2013-11-03 21:51:10 +08:00
..
backend Revert "Escape strings" 2013-11-01 16:29:28 +02:00
ldap When looking up a user by DN, use single scope 2013-11-03 21:51:10 +08:00
oauth Oauth users and users created by admin should be confirmed immediatly 2013-10-15 09:59:58 +03:00
satellite Remove outdated comments. 2013-10-04 13:26:48 +02:00
access.rb Improve admin user show page 2013-08-27 21:39:34 +03:00
app_logger.rb
auth.rb Remove code that was accidently added in 5dae40f579 2013-09-14 10:14:55 +03:00
blacklist.rb Add 'notes' to path blacklist, fixes #4967 2013-09-03 07:25:39 +02:00
diff_parser.rb Move diff parsing to own class. Correctly identify note diff line 2013-08-04 20:43:49 +03:00
git_logger.rb
identifier.rb fix wrong class name 2013-04-29 09:49:25 +03:00
inline_diff.rb Improve commit diff 2013-09-04 18:15:42 +03:00
issues_labels.rb Include default labels in issues autocomplete etc. Show colored labels on issues show page 2013-05-07 19:26:41 +03:00
logger.rb
markdown.rb Allow markdown tables 2013-08-26 14:27:19 +03:00
popen.rb Replace old hashes with new 1.9 ruby hashes (rebase) 2013-05-05 18:01:10 +04:00
reference_extractor.rb Link issues from comments and automatically close them 2013-08-25 18:58:41 -04:00
regex.rb Expand refs constraints to include valid characters 2013-10-24 16:31:15 +11:00
seeder.rb
theme.rb Classic (mars) theme will be default for 6.0 2013-06-20 11:46:54 +03:00
version_info.rb Fix abort gitlab:app:check 2013-06-06 10:10:51 +09:00