ldap: use first array value for sni when provided csv input

goauthentik · Jun 9, 2023 · bc660dd · bc660dd
1 parent fa4d320
commit bc660dd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/authentik/sources/ldap/models.py b/authentik/sources/ldap/models.py
@@ -139,7 +139,7 @@ def server(self, **kwargs) -> Server:
         if ciphers := CONFIG.y("ldap.tls.ciphers", None):
             tls_kwargs["ciphers"] = ciphers.strip()
         if self.sni:
-            tls_kwargs["sni"] = self.server_uri.strip()
+            tls_kwargs["sni"] = self.server_uri.split(",")[0].strip()
         server_kwargs = {
             "get_info": ALL,
             "connect_timeout": LDAP_TIMEOUT,