Merge pull request #6298 from jangsutsr/6237_prevent_ldap_user_from_imposing_existing_tower_user

Prevent LDAP user from imposing existing Tower user
This commit is contained in:
Aaron Tan 2017-05-22 11:08:21 -04:00 committed by GitHub
commit 903e3076aa

View File

@ -90,6 +90,12 @@ class LDAPBackend(BaseLDAPBackend):
if not feature_enabled('ldap'):
logger.error("Unable to authenticate, license does not support LDAP authentication")
return None
try:
user = User.objects.get(username=username)
if user and (not user.profile or not user.profile.ldap_dn):
return None
except User.DoesNotExist:
pass
try:
return super(LDAPBackend, self).authenticate(username, password)
except Exception: