Lowercase LDAP usernames by default for authentication

2 files changed, 2 insertions, 0 deletions

diff --git a/app/Auth/Ldap.php b/app/Auth/Ldap.php
index e9bb5815..376d16f6 100644
--- a/app/Auth/Ldap.php
+++ b/app/Auth/Ldap.php
@@ -29,6 +29,7 @@ class Ldap extends Base
      */
     public function authenticate($username, $password)
     {
+        $username = LDAP_USERNAME_CASE_SENSITIVE ? $username : strtolower($username);
         $result = $this->findUser($username, $password);
 
         if (is_array($result)) {
diff --git a/app/constants.php b/app/constants.php
index 064e0211..39ab5470 100644
--- a/app/constants.php
+++ b/app/constants.php
@@ -36,6 +36,7 @@ defined('LDAP_USER_PATTERN') or define('LDAP_USER_PATTERN', '');
 defined('LDAP_ACCOUNT_FULLNAME') or define('LDAP_ACCOUNT_FULLNAME', 'displayname');
 defined('LDAP_ACCOUNT_EMAIL') or define('LDAP_ACCOUNT_EMAIL', 'mail');
 defined('LDAP_ACCOUNT_ID') or define('LDAP_ACCOUNT_ID', '');
+defined('LDAP_USERNAME_CASE_SENSITIVE') or define('LDAP_USERNAME_CASE_SENSITIVE', false);
 
 // Google authentication
 defined('GOOGLE_AUTH') or define('GOOGLE_AUTH', false);