Fix bug [ 1822782 ] login with empty password allowed when ldap active
Implementing suggestion from stefan kuthan - stefan_kuthan
This commit is contained in:
parent
175a76a907
commit
8e67bce559
|
@ -229,17 +229,17 @@ public class Login
|
|||
if (system == null)
|
||||
throw new IllegalStateException("No System Info");
|
||||
|
||||
if (app_pwd == null || app_pwd.length() == 0)
|
||||
{
|
||||
log.warning("No Apps Password");
|
||||
return null;
|
||||
}
|
||||
if (system.isLDAP())
|
||||
{
|
||||
authenticated = system.isLDAP(app_user, app_pwd);
|
||||
if (authenticated)
|
||||
app_pwd = null;
|
||||
// if not authenticated, use AD_User as backup
|
||||
}
|
||||
else if (app_pwd == null || app_pwd.length() == 0)
|
||||
{
|
||||
log.warning("No Apps Password");
|
||||
return null;
|
||||
// if not authenticated, use AD_User as backup
|
||||
}
|
||||
|
||||
KeyNamePair[] retValue = null;
|
||||
|
|
Loading…
Reference in New Issue