root
/
rabbitmq-server
mirror of https://github.com/rabbitmq/rabbitmq-server.git
1
0
Fork 0
Code Issues Actions 1 Packages Projects Releases Wiki Activity

LDAP: allow tagged values to be used for sensitive settings 

Plus a drive-by Dialyzer improvement.
This commit is contained in:
Michael Klishin 2024-08-14 11:57:12 -04:00
parent 23ad641d9a
commit 15fe108cc3
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
deps/rabbitmq_auth_backend_ldap/priv/schema/rabbitmq_auth_backend_ldap.schema vendored
View File

@ -120,7 +120,7 @@ end}.
[{datatype, [string]}]}.
{mapping, "auth_ldap.dn_lookup_bind.password", "rabbitmq_auth_backend_ldap.dn_lookup_bind",
[{datatype, [string]}]}.
[{datatype, [tagged_binary, binary]}]}.
%% - as_user (to bind as the authenticated user - requires a password)
%% - anon (to bind anonymously)
@ -161,7 +161,7 @@ end}.
[{datatype, string}]}.
{mapping, "auth_ldap.other_bind.password", "rabbitmq_auth_backend_ldap.other_bind",
[{datatype, string}]}.
[{datatype, [tagged_binary, binary]}]}.
{translation, "rabbitmq_auth_backend_ldap.other_bind",
fun(Conf) ->

1
deps/rabbitmq_auth_backend_ldap/src/rabbit_auth_backend_ldap.erl vendored
View File

@ -85,6 +85,7 @@ user_login_authentication(Username, _AuthProps) ->
%% Credentials (i.e. password) maybe directly in the password attribute in AuthProps
%% or as a Function with the attribute rabbit_auth_backend_ldap if the user was already authenticated with http backend
%% or as a Function with the attribute rabbit_auth_backend_cache if the user was already authenticated via cache backend
-spec extractPassword(list()) -> rabbit_types:option(binary()).
extractPassword(AuthProps) ->
case proplists:get_value(password, AuthProps, none) of
none ->