lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-18 02:25:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

ldap, cleanse local username on import, closes https://github.com/opnsense/core/issues/2242

Browse Source
This commit is contained in:
Ad Schellevis 2018-03-06 10:11:50 +01:00
parent cc6c5ded1f
commit 9efc29f2dc
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/www/system_usermanager_import_ldap.php
View File

@ -99,7 +99,11 @@ if ($authcfg['type'] == 'ldap') {
foreach ($result as $ldap_user ) {
foreach ($_POST['user_dn'] as $userDN) {
if ($userDN == $ldap_user['dn'] && !in_array($ldap_user['dn'], $confDNs)) {
add_local_user($ldap_user['name'] , $ldap_user['dn'], $ldap_user['fullname']);
// strip domain if it exists and cleanse ldap username to make sure it is a valid one for
// our system.
$username = explode('@', $ldap_user['name'])[0];
$username = substr(preg_replace("/[^a-zA-Z0-9\.\-_]/", "", $username),0 ,32);
add_local_user($username , $ldap_user['dn'], $ldap_user['fullname']);
$update_count++;
}
}