Fixed: LDAP authentication without password may be possible (#714).

git-svn-id: http://redmine.rubyforge.org/svn/trunk@1169 e93f8b46-1217-0410-a6f0-8f06a7374b81
2008-02-22 17:26:53 +00:00 · 2008-02-22 17:26:53 +00:00 · b935aebd99
parent ade572048a
commit b935aebd99
1 changed files with 1 additions and 0 deletions
--- a/app/models/auth_source_ldap.rb
+++ b/app/models/auth_source_ldap.rb
@ -27,6 +27,7 @@ class AuthSourceLdap < AuthSource
  end
  
  def authenticate(login, password)
+    return nil if login.blank? || password.blank?
    attrs = []
    # get user's DN
    ldap_con = initialize_ldap_con(self.account, self.account_password)