Docker: Add WEBLATE_AUTH_LDAP_CONNECTION_OPTION_REFERRALS parameter (#…

…4215) * Comes in handy with Active Directory (AD) LDAP servers. * Should fix https://github.com/WeblateOrg/docker/issues/724. * No idea if this readable coding though, but it is working here... * Adding WEBLATE_AUTH_LDAP_CONNECTION_OPTION_REFERRALS which is default true (1).
WeblateOrg · Jul 24, 2020 · 5924729 · 5924729
1 parent 8bbe4a1
commit 5924729
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/docs/admin/install/docker.rst b/docs/admin/install/docker.rst
@@ -642,6 +642,7 @@ LDAP
 .. envvar:: WEBLATE_AUTH_LDAP_USER_ATTR_MAP
 .. envvar:: WEBLATE_AUTH_LDAP_BIND_DN
 .. envvar:: WEBLATE_AUTH_LDAP_BIND_PASSWORD
+.. envvar:: WEBLATE_AUTH_LDAP_CONNECTION_OPTION_REFERRALS
 .. envvar:: WEBLATE_AUTH_LDAP_USER_SEARCH
 .. envvar:: WEBLATE_AUTH_LDAP_USER_SEARCH_FILTER
 
@@ -678,6 +679,7 @@ LDAP
           WEBLATE_AUTH_LDAP_BIND_DN: CN=ldap,CN=Users,DC=example,DC=com
           WEBLATE_AUTH_LDAP_BIND_PASSWORD: password
           WEBLATE_AUTH_LDAP_SERVER_URI: ldap://ldap.example.org
+          WEBLATE_AUTH_LDAP_CONNECTION_OPTION_REFERRALS: 0
           WEBLATE_AUTH_LDAP_USER_ATTR_MAP: full_name:name,email:mail
           WEBLATE_AUTH_LDAP_USER_SEARCH: CN=Users,DC=example,DC=com
           WEBLATE_AUTH_LDAP_USER_SEARCH_FILTER: (sAMAccountName=%(user)s)

diff --git a/weblate/settings_docker.py b/weblate/settings_docker.py
@@ -390,6 +390,11 @@
             os.environ.get("WEBLATE_AUTH_LDAP_USER_SEARCH_FILTER", "(uid=%(user)s)"),
         )
 
+    if not get_env_bool("WEBLATE_AUTH_LDAP_CONNECTION_OPTION_REFERRALS", True):
+        AUTH_LDAP_CONNECTION_OPTIONS = {
+            ldap.OPT_REFERRALS: 0,
+        }
+
 # Always include Weblate backend
 AUTHENTICATION_BACKENDS += ("weblate.accounts.auth.WeblateUserBackend",)