shaba/one
1
0
Fork 0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-21 14:50:08 +03:00
Code Releases Wiki Activity

feature #1741: test every dn in x509 authentication

Browse Source 
This patch was provided by Boris Parak <256254@mail.muni.cz> in
http://dev.opennebula.org/issues/1741

Minor cosmetic changes
This commit is contained in:
Javi Fontan 2013-02-18 17:52:17 +01:00
parent efbaff9b9a
commit 7b9c6561ea
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/cloud/common/CloudAuth.rb
View File

@ -134,9 +134,21 @@ class CloudAuth
# password:: _String_ the password
# [return] _Hash_ with the username
def get_username(password)
xpath = "USER[contains(PASSWORD, \"#{password}\")]/NAME"
xpath = "USER[PASSWORD=\"#{password}\"]/NAME"
username = retrieve_from_userpool(xpath)
retrieve_from_userpool(xpath)
# No exact match, trying to match password with each
# of the pipe-separated DNs stored in USER/PASSWORD
if username.nil?
@lock.synchronize do
@user_pool.each do |user|
return user["NAME"] if user["AUTH_DRIVER"] == "x509" &&
user["PASSWORD"].split('|').include?(password)
end
end
end
username
end
private