You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "handavid (via GitHub)" <gi...@apache.org> on 2026/08/26 18:48:19 UTC
[PR] KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends [knox]
handavid opened a new pull request, #1358:
URL: https://github.com/apache/knox/pull/1358
[KNOX-3425](https://issues.apache.org/jira/browse/KNOX-3425) - A short description of the change
## What changes were proposed in this pull request?
The LdapProxyBackend.authenticate method will now return false if either the given DN or password is empty to prevent unauthorized and anonymous binds.
The UserSearchInterceptor is also updated to not call the backend if the DN or password is empty.
## How was this patch tested?
Unit tests added.
Manual tests performed using ldapsearch to attempt anonymous bind that previously succeeded
```
ldapsearch -v -x -H ldap://localhost:3890 -b 'ou=people,DC=proxy,DC=com' '(uid=guest*)' '*'
```
## Integration Tests
integration tests were run locally
## UI changes
no UI changes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends [knox]
Posted by "handavid (via GitHub)" <gi...@apache.org>.
handavid commented on PR #1358:
URL: https://github.com/apache/knox/pull/1358#issuecomment-5429659767
@smolnar82 @hanicz
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends [knox]
Posted by "hanicz (via GitHub)" <gi...@apache.org>.
hanicz merged PR #1358:
URL: https://github.com/apache/knox/pull/1358
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] KNOX-3425: LDAP Proxy disallows anonymous binds to remote backends [knox]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #1358:
URL: https://github.com/apache/knox/pull/1358#issuecomment-5436413150
## Test Results
3 files 3 suites 6s ⏱️
52 tests 52 ✅ 0 💤 0 ❌
63 runs 63 ✅ 0 💤 0 ❌
Results for commit f3a7e9ea.
[test-results]:data:application/gzip;base64,H4sIALv0j2oC/12Myw6DIBBFf8Ww7gLFAdufaYAOyaQqDY+V6b8XjVra3T3nJmdhjkaM7NaIS8NipnTCIwedyM8FZcFypPWC7oB7zNb+mSe9iuGncJrGH4Eh+LCbkOe1KMW+j2Alvr2Nq9zGdc36aaJUgDmhFV5RIyjTKQOtAcfR6b4fWqmQW6UAYTDs/QGtgKbX/wAAAA==
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@knox.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org