Relaxed the LDAP search a bit so that it also matches the 'cn' and 'mail' attributes.

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@29615 71c3de6d-444a-0410-be80-ed276b4c234a

Originally-Committed-As: ef39c053f73939b89c3b020d21a4ff098ea41fb5
This commit is contained in:
kohsuke 2010-03-30 23:10:15 +00:00
parent 92d1ac3811
commit 5181479ad7

View file

@ -226,9 +226,9 @@ public class LDAPSecurityRealm extends SecurityRealm {
/**
* Query to locate an entry that identifies the user, given the user name string.
*
* Normally "uid={0}"
* Normally something like "uid={0}"
*
* @see FilterBasedLdapUserSearch
* @see FilterBasedLdapUserSearch#searchFilter
*/
public final String userSearch;
@ -282,7 +282,7 @@ public class LDAPSecurityRealm extends SecurityRealm {
this.rootDN = rootDN.trim();
this.userSearchBase = fixNull(userSearchBase).trim();
userSearch = fixEmptyAndTrim(userSearch);
this.userSearch = userSearch!=null ? userSearch : "uid={0}";
this.userSearch = userSearch!=null ? userSearch : "(| (uid={0}) (mail={0}) (cn={0}))";
this.groupSearchBase = fixEmptyAndTrim(groupSearchBase);
}