diff options
| author | Magnus Hagander <magnus@hagander.net> | 2009-06-25 11:30:10 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2009-06-25 11:30:10 +0000 |
| commit | e19c960df5437a30dc569cbe33175d8862012794 (patch) | |
| tree | 2b907a1ca20f50ef3388bdf54a1cba2f99c22a27 /src | |
| parent | 20b037100eba4542271cc2c5f6b5e90a8203d710 (diff) | |
| download | postgresql-e19c960df5437a30dc569cbe33175d8862012794.tar.gz postgresql-e19c960df5437a30dc569cbe33175d8862012794.zip | |
Disallow empty passwords in LDAP authentication, the same way
we already do it for PAM.
Diffstat (limited to 'src')
| -rw-r--r-- | src/backend/libpq/auth.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/src/backend/libpq/auth.c b/src/backend/libpq/auth.c index b1470715b54..a02022636ea 100644 --- a/src/backend/libpq/auth.c +++ b/src/backend/libpq/auth.c @@ -8,7 +8,7 @@ * * * IDENTIFICATION - * $PostgreSQL: pgsql/src/backend/libpq/auth.c,v 1.146.2.1 2008/07/24 17:52:09 tgl Exp $ + * $PostgreSQL: pgsql/src/backend/libpq/auth.c,v 1.146.2.2 2009/06/25 11:30:10 mha Exp $ * *------------------------------------------------------------------------- */ @@ -788,6 +788,13 @@ CheckLDAPAuth(Port *port) if (passwd == NULL) return STATUS_EOF; /* client wouldn't send password */ + if (strlen(passwd) == 0) + { + ereport(LOG, + (errmsg("empty password returned by client"))); + return STATUS_ERROR; + } + ldap = ldap_init(server, ldapport); if (!ldap) { |