diff --git a/Changes b/Changes index ef16e468..db4dfe71 100644 --- a/Changes +++ b/Changes @@ -4,6 +4,10 @@ * better link speed names on network map + [BUG FIXES] + + * fix case insensitive username match for LDAP + 2.039019 - 2018-03-23 [BUG FIXES] diff --git a/lib/App/Netdisco/Web/Auth/Provider/DBIC.pm b/lib/App/Netdisco/Web/Auth/Provider/DBIC.pm index 8d779d0a..190a38b6 100644 --- a/lib/App/Netdisco/Web/Auth/Provider/DBIC.pm +++ b/lib/App/Netdisco/Web/Auth/Provider/DBIC.pm @@ -36,7 +36,7 @@ sub get_user_details { my $user = try { $database->resultset($users_table)->find({ - $username_column => { -ilike => $username }, + $username_column => { -ilike => quotemeta($username) }, }); }; diff --git a/lib/App/Netdisco/Web/AuthN.pm b/lib/App/Netdisco/Web/AuthN.pm index 6ce04181..e54dad35 100644 --- a/lib/App/Netdisco/Web/AuthN.pm +++ b/lib/App/Netdisco/Web/AuthN.pm @@ -58,7 +58,7 @@ post '/login' => sub { if ($success) { my $user = schema('netdisco')->resultset('User') - ->find({ username => { -ilike => param('username') } }); + ->find({ username => { -ilike => quotemeta(param('username')) } }); session logged_in_user => $user->username; session logged_in_fullname => $user->fullname;