diff options
| author | Magnus Hagander <magnus@hagander.net> | 2009-06-25 11:30:12 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2009-06-25 11:30:12 +0000 |
| commit | e3eb8f6cc2f96855af33f4500a4f9e336ea6a3e3 (patch) | |
| tree | ce37067a6bb1602140197e3a0e9069c59ba69280 /src/backend/libpq/auth.c | |
| parent | 462c280f1636563d2dfc4296f67d3c6ab3f7297d (diff) | |
Disallow empty passwords in LDAP authentication, the same way
we already do it for PAM.
Diffstat (limited to 'src/backend/libpq/auth.c')
| -rw-r--r-- | src/backend/libpq/auth.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/backend/libpq/auth.c b/src/backend/libpq/auth.c index 031a9d4f54c..0c9fc850db0 100644 --- a/src/backend/libpq/auth.c +++ b/src/backend/libpq/auth.c @@ -8,7 +8,7 @@ * * * IDENTIFICATION - * $PostgreSQL: pgsql/src/backend/libpq/auth.c,v 1.164.2.1 2008/07/24 17:52:02 tgl Exp $ + * $PostgreSQL: pgsql/src/backend/libpq/auth.c,v 1.164.2.2 2009/06/25 11:30:12 mha Exp $ * *------------------------------------------------------------------------- */ @@ -1457,6 +1457,13 @@ CheckLDAPAuth(Port *port) if (passwd == NULL) return STATUS_EOF; /* client wouldn't send password */ + if (strlen(passwd) == 0) + { + ereport(LOG, + (errmsg("empty password returned by client"))); + return STATUS_ERROR; + } + ldap = ldap_init(server, ldapport); if (!ldap) { |