kvspb / nginx-auth-ldap

LDAP authentication module for nginx
BSD 2-Clause "Simplified" License
735 stars 252 forks source link

Treating LDAP_NO_SUCH_OBJECT as soft error, updating example.conf #66

Closed amoiseiev closed 9 years ago

amoiseiev commented 9 years ago

Problem: When administrator specifies a non existing group or user, module fails authentication request at that very moment and skips additional group or user checking. Such behavior contradicts "satisfy any" logic and can cause authentication problems that can be hard to diagnose.

Solution: Handle LDAP_NO_SUCH_OBJECT exception the same way as LDAP_COMPARE_FALSE or LDAP_NO_SUCH_OBJECT.