coheigea opened a new pull request, #339:
URL: https://github.com/apache/directory-ldap-api/pull/339
The void bind() helpers used ResultCodeEnum.processResponse() to check the
bind result, which does not throw for REFERRAL, SASL_BIND_IN_PROGRESS,
PARTIAL_RESULTS, CANCELED or COMPARE_TRUE/FALSE. A server that does not
hold the bind DN may answer a simple bind with a referral without checking
the credentials, so an application authenticating users with
try { connection.bind( dn, password ); ... } accepted any password for
such a DN, although the connection was not authenticated.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
