x-itec / openvpn-auth-ldap

Automatically exported from code.google.com/p/openvpn-auth-ldap
Other
0 stars 0 forks source link

Compatability with auth-user-pass-optional #32

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Hello,

I'm trying to set up OpenVPN server which authenticates via certificate OR LDAP 
(not the both in the same time). I'm trying to archive this via using 
auth-user-pass-optional option in openvpn config.

As documentation says "When this option is used, and a connecting client does 
not submit a username/password, the user-defined authentication module/script 
will see the username and password as being set to empty strings (""). The 
authentication module/script MUST have logic to detect this condition and 
respond accordingly."

But as I can see in logs LDAP plugin tries to perform bind auth with empty 
username. And obviously it fails.

Could the plugin be adapted to cope with auth-user-pass-optional case?

Original issue reported on code.google.com by z0r...@gmail.com on 31 May 2013 at 3:53