You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Spent a while trying to get this to work today. Turned out the issue is this snippet of code-
ifself.lookup_dn:
ifstr(self.lookup_dn_user_dn_attribute).upper() =="CN":
# Only escape commas if the lookup attribute is CNusername=re.subn(r"([^\\]),", r"\1\,", username)[0]
Was turning the username my AD returned "Becotte, Paul" into "Becotte\, Paul", which fails auth. I am FAR from an AD expert and have no idea under what circumstances that escape may or may not be appropriate, but there was no combination of settings that would make my ldap auth bind with the search turned on. Fortunately, my setup appears to work fine with the search completely disabled (again, no idea if that is reliable or not!) but it feels like the escape_dn_username = False flag would also prevent the comma from being escaped?
(The latest version in this repo actually would have worked- I could have used attribute="uid", and a recent commit turns ['pbecotte'] into 'pbecotte' which would work, but there hasn't been a release since that change).
The text was updated successfully, but these errors were encountered:
Spent a while trying to get this to work today. Turned out the issue is this snippet of code-
Was turning the username my AD returned
"Becotte, Paul"
into"Becotte\, Paul"
, which fails auth. I am FAR from an AD expert and have no idea under what circumstances that escape may or may not be appropriate, but there was no combination of settings that would make my ldap auth bind with the search turned on. Fortunately, my setup appears to work fine with the search completely disabled (again, no idea if that is reliable or not!) but it feels like theescape_dn_username
= False flag would also prevent the comma from being escaped?(The latest version in this repo actually would have worked- I could have used attribute="uid", and a recent commit turns ['pbecotte'] into 'pbecotte' which would work, but there hasn't been a release since that change).
The text was updated successfully, but these errors were encountered: