jtblin / go-ldap-client

Simple ldap client to authenticate, retrieve basic information and groups for a user.
Other
261 stars 90 forks source link

There is a very serious bug #16

Open posly66 opened 6 years ago

posly66 commented 6 years ago

when i connected to the AD and the password is empty, authenticate method return true

lrstanley commented 6 years ago

looks like pr from last year mentions this; https://github.com/jtblin/go-ldap-client/pull/8

lrstanley commented 6 years ago

and: https://github.com/jtblin/go-ldap-client/issues/11

related: https://stackoverflow.com/questions/27873362/ldap-bind-seems-to-return-true-with-blank-password

andriisoldatenko commented 6 years ago

@jtblin are you still there to support library?