From b935aebd99369a9c8e848f9d346be56e02c57c4b Mon Sep 17 00:00:00 2001 From: Jean-Philippe Lang Date: Fri, 22 Feb 2008 17:26:53 +0000 Subject: [PATCH] Fixed: LDAP authentication without password may be possible (#714). git-svn-id: http://redmine.rubyforge.org/svn/trunk@1169 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- app/models/auth_source_ldap.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/app/models/auth_source_ldap.rb b/app/models/auth_source_ldap.rb index b79b3ced0..5a6789a3b 100644 --- a/app/models/auth_source_ldap.rb +++ b/app/models/auth_source_ldap.rb @@ -27,6 +27,7 @@ class AuthSourceLdap < AuthSource end def authenticate(login, password) + return nil if login.blank? || password.blank? attrs = [] # get user's DN ldap_con = initialize_ldap_con(self.account, self.account_password) -- 2.39.5