oss/Radicale
oss/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-10-03 21:20:45 +00:00
Code Wiki Activity

LDAP auth: warn if 'ldap_ssl_ca_file' is set without LDAP encryption

Browse source
This commit is contained in:
Peter Marschall 2025-09-14 11:41:10 +02:00
parent 73b77defe4
commit b21549b998
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
radicale/auth/ldap.py
View file

@ -124,6 +124,8 @@ class Auth(auth.BaseAuth):
if self._ldap_ssl_ca_file == "" and self._ldap_ssl_verify_mode != ssl.CERT_NONE and self._ldap_security in ("tls", "starttls"): if self._ldap_ssl_ca_file == "" and self._ldap_ssl_verify_mode != ssl.CERT_NONE and self._ldap_security in ("tls", "starttls"):
logger.warning("Certificate verification not possible: 'ldap_ssl_ca_file' not set") logger.warning("Certificate verification not possible: 'ldap_ssl_ca_file' not set")
if self._ldap_ssl_ca_file and self._ldap_security not in ("tls", "starttls"):
logger.warning("Config setting 'ldap_ssl_ca_file' useless without encrypted LDAP connection")
logger.info("auth.ldap_uri : %r" % self._ldap_uri) logger.info("auth.ldap_uri : %r" % self._ldap_uri)
logger.info("auth.ldap_base : %r" % self._ldap_base) logger.info("auth.ldap_base : %r" % self._ldap_base)