Explorar o código

Reject by default LDAP connections not authorized via CA trust store

See also: https://github.com/wekan/wekan/issues/3482
Robert Scheck %!s(int64=4) %!d(string=hai) anos
pai
achega
31f89121fe
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      packages/wekan-ldap/server/ldap.js

+ 1 - 1
packages/wekan-ldap/server/ldap.js

@@ -19,7 +19,7 @@ export default class LDAP {
       idle_timeout                       : this.constructor.settings_get('LDAP_IDLE_TIMEOUT'),
       encryption                         : this.constructor.settings_get('LDAP_ENCRYPTION'),
       ca_cert                            : this.constructor.settings_get('LDAP_CA_CERT'),
-      reject_unauthorized                : this.constructor.settings_get('LDAP_REJECT_UNAUTHORIZED') || false,
+      reject_unauthorized                : this.constructor.settings_get('LDAP_REJECT_UNAUTHORIZED') || true,
       Authentication                     : this.constructor.settings_get('LDAP_AUTHENTIFICATION'),
       Authentication_UserDN              : this.constructor.settings_get('LDAP_AUTHENTIFICATION_USERDN'),
       Authentication_Password            : this.constructor.settings_get('LDAP_AUTHENTIFICATION_PASSWORD'),