Skip to content

Commit 995d0f8

Browse files
committed
Default binddn is changed to empty string.
This allows to use anonymous bind, if binddn is not provided. Previous default setting lead to use of unauthenticated bind, which is usually disabled in LDAP server configurations.
1 parent 081d42d commit 995d0f8

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

nginx-ldap-auth-daemon.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -144,7 +144,7 @@ def get_params(self):
144144
'url': ('X-Ldap-URL', None),
145145
'basedn': ('X-Ldap-BaseDN', None),
146146
'template': ('X-Ldap-Template', '(cn=%(username)s)'),
147-
'binddn': ('X-Ldap-BindDN', 'cn=anonymous'),
147+
'binddn': ('X-Ldap-BindDN', ''),
148148
'bindpasswd': ('X-Ldap-BindPass', ''),
149149
'cookiename': ('X-CookieName', '')
150150
}

0 commit comments

Comments
 (0)