LDAP User Limit about filegator HOT 1 OPEN

Hi there,

yes I can confirm that there are two limits with LDAP authentication in general:

1. Username ist always checked case sensitive. With Microsoft AD users wonder why they cannot login. To solve this a simple modification ist required.
2. There will always be a limit with LDAP when using ldapsearch without pagination. Harder so solve.

I cannot give you a patch, but you can - perhaps - make the required modifications on your own. You need to change the following file:
backend/Services/Auth/Adapters/LDAP.php

Line 92 compares the given username with an array-entry of ALL (2nd problem) users:
if ($u['username'] == $username &&.......
Simply use strncase instead of "==" solves problem 1. Perhaps this could be a feature request, to add a new option "username_casesensisitve".

To solve 2 - the problem you described - there no easy way going. I think the limit is server side, not client side. But MS enables you to increase that limit in some way (with hard coded limit anyway).

The programmatic way would be to change function "getUsers()" with the call @ldap_search. This will always be limited since the developer uses pagination (would I would suggest here). Would be about 20 lines more code. In General the authentication method is not very good: When a user enters his name, why do you need to get all users from LDAP to find the correct username. Simply use a LDAP-Filter to only return the LDAP-Entry of the user who wants to log in.

My quick but dirty workaround was to rewrite the function getUsers() to getUsers($username_filter="*"). The parameter filter is the username (if available). The filter parameter then replaces a place holder in "$this->ldap_filter", so that I only collect the user who actually wants to login from ldap.

from filegator.