From: Jean-Philippe Lang <jp_lang@yahoo.fr>
Date: Fri, 22 Feb 2008 17:26:53 +0000 (+0000)
Subject: Fixed: LDAP authentication without password may be possible (#714).
X-Git-Tag: 0.7.0-RC1~118
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=b935aebd99369a9c8e848f9d346be56e02c57c4b;p=redmine.git

Fixed: LDAP authentication without password may be possible (#714).

git-svn-id: http://redmine.rubyforge.org/svn/trunk@1169 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/app/models/auth_source_ldap.rb b/app/models/auth_source_ldap.rb
index b79b3ced0..5a6789a3b 100644
--- a/app/models/auth_source_ldap.rb
+++ b/app/models/auth_source_ldap.rb
@@ -27,6 +27,7 @@ class AuthSourceLdap < AuthSource
   end
   
   def authenticate(login, password)
+    return nil if login.blank? || password.blank?
     attrs = []
     # get user's DN
     ldap_con = initialize_ldap_con(self.account, self.account_password)