Reject by default LDAP connections not authorized via CA trust store

See also: https://github.com/wekan/wekan/issues/3482
This commit is contained in:
Robert Scheck 2021-01-25 23:42:22 +01:00
parent 1189b66748
commit 31f89121fe

View file

@ -19,7 +19,7 @@ export default class LDAP {
idle_timeout : this.constructor.settings_get('LDAP_IDLE_TIMEOUT'), idle_timeout : this.constructor.settings_get('LDAP_IDLE_TIMEOUT'),
encryption : this.constructor.settings_get('LDAP_ENCRYPTION'), encryption : this.constructor.settings_get('LDAP_ENCRYPTION'),
ca_cert : this.constructor.settings_get('LDAP_CA_CERT'), ca_cert : this.constructor.settings_get('LDAP_CA_CERT'),
reject_unauthorized : this.constructor.settings_get('LDAP_REJECT_UNAUTHORIZED') || false, reject_unauthorized : this.constructor.settings_get('LDAP_REJECT_UNAUTHORIZED') || true,
Authentication : this.constructor.settings_get('LDAP_AUTHENTIFICATION'), Authentication : this.constructor.settings_get('LDAP_AUTHENTIFICATION'),
Authentication_UserDN : this.constructor.settings_get('LDAP_AUTHENTIFICATION_USERDN'), Authentication_UserDN : this.constructor.settings_get('LDAP_AUTHENTIFICATION_USERDN'),
Authentication_Password : this.constructor.settings_get('LDAP_AUTHENTIFICATION_PASSWORD'), Authentication_Password : this.constructor.settings_get('LDAP_AUTHENTIFICATION_PASSWORD'),