From 215c3160f8ee867f6ff91c9280d05e4bf36007c4 Mon Sep 17 00:00:00 2001 From: Mark Sagi-Kazar Date: Mon, 28 Jun 2021 17:49:40 +0200 Subject: [PATCH] fix(connector/ldap): explicit anonymus ldap bind Signed-off-by: Mark Sagi-Kazar --- connector/ldap/ldap.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/connector/ldap/ldap.go b/connector/ldap/ldap.go index d3bc20ab..eaee078d 100644 --- a/connector/ldap/ldap.go +++ b/connector/ldap/ldap.go @@ -331,10 +331,11 @@ func (c *ldapConnector) do(_ context.Context, f func(c *ldap.Conn) error) error defer conn.Close() // If bindDN and bindPW are empty this will default to an anonymous bind. - if err := conn.Bind(c.BindDN, c.BindPW); err != nil { - if c.BindDN == "" && c.BindPW == "" { + if c.BindDN == "" && c.BindPW == "" { + if err := conn.UnauthenticatedBind(""); err != nil { return fmt.Errorf("ldap: initial anonymous bind failed: %v", err) } + } else if err := conn.Bind(c.BindDN, c.BindPW); err != nil { return fmt.Errorf("ldap: initial bind for user %q failed: %v", c.BindDN, err) }