From 7c2bf746f2790e724b56bb1b05614bd1cd6df2f4 Mon Sep 17 00:00:00 2001
From: Frederic Guillot <fred@kanboard.net>
Date: Fri, 20 Feb 2015 19:42:27 -0500
Subject: Lowercase LDAP usernames by default for authentication

---
 app/Auth/Ldap.php | 1 +
 app/constants.php | 1 +
 2 files changed, 2 insertions(+)

(limited to 'app')

diff --git a/app/Auth/Ldap.php b/app/Auth/Ldap.php
index e9bb5815..376d16f6 100644
--- a/app/Auth/Ldap.php
+++ b/app/Auth/Ldap.php
@@ -29,6 +29,7 @@ class Ldap extends Base
      */
     public function authenticate($username, $password)
     {
+        $username = LDAP_USERNAME_CASE_SENSITIVE ? $username : strtolower($username);
         $result = $this->findUser($username, $password);
 
         if (is_array($result)) {
diff --git a/app/constants.php b/app/constants.php
index 064e0211..39ab5470 100644
--- a/app/constants.php
+++ b/app/constants.php
@@ -36,6 +36,7 @@ defined('LDAP_USER_PATTERN') or define('LDAP_USER_PATTERN', '');
 defined('LDAP_ACCOUNT_FULLNAME') or define('LDAP_ACCOUNT_FULLNAME', 'displayname');
 defined('LDAP_ACCOUNT_EMAIL') or define('LDAP_ACCOUNT_EMAIL', 'mail');
 defined('LDAP_ACCOUNT_ID') or define('LDAP_ACCOUNT_ID', '');
+defined('LDAP_USERNAME_CASE_SENSITIVE') or define('LDAP_USERNAME_CASE_SENSITIVE', false);
 
 // Google authentication
 defined('GOOGLE_AUTH') or define('GOOGLE_AUTH', false);
-- 
cgit v1.2.3