[Nufw-users] NuAuth and the LDAP login attribute

[Christophe Nowicki]

Hi,

I've found an issue with the NuAuth and LDAP authentification.
The LDAP attribut used for user authentification is hard coded in the
source code :

Sep 22 17:51:13 ldap slapd[15650]: conn=1096 op=1 SRCH
base="ou=people,dc=network,dc=com" scope=2 deref=0
filter="(&(objectClass=NuAccount)(cn=cscm))"

As you can see, nuauth is using cn=<user_name> when looking for an user.
But my company is using uid as an prefix. (uid=<user_name>).

This prefix is defined in the ldap.c file :
./nuauth/modules/ldap/ldap.c:452:  if
(snprintf(filter,LDAP_QUERY_SIZE-1,"(&(objectClass=NuAccount)(cn=%s))",user)
>= (LDAP_QUERY_SIZE-1)){

You should give the possibility to configure login attribut from the
nuauth.conf file :

   ldap_login_attr=cn

Best Regards,
-- 
Nowicki Christophe
http://csquad.org