Set ldap to not follow referrals by default

Added LDAP_FOLLOW_REFERRALS .env option to override.
Fixes #317

diff --git a/app/Services/LdapService.php b/app/Services/LdapService.php
index 71dc9c0e1a57b731048445bcdd78fed57e98c6a2..598efc19dd68828fab45da38304509056f215189 100644 (file)
--- a/app/Services/LdapService.php
+++ b/app/Services/LdapService.php
@@ -42,6 +42,8 @@ class LdapService
         $userFilter = $this->buildFilter($this->config['user_filter'], ['user' => $userName]);
         $baseDn = $this->config['base_dn'];
         $emailAttr = $this->config['email_attribute'];
+        $followReferrals = $this->config['follow_referrals'] ? 1 : 0;
+        $this->ldap->setOption($ldapConnection, LDAP_OPT_REFERRALS, $followReferrals);
         $users = $this->ldap->searchAndGetEntries($ldapConnection, $baseDn, $userFilter, ['cn', 'uid', 'dn', $emailAttr]);
         if ($users['count'] === 0) return null;
 

diff --git a/config/services.php b/config/services.php
index 99022e5f2bed0b0b7a415a9d6929ef9f1c45bf3a..b4959c7249cbbffb0024bc448e8ec00bb452172a 100644 (file)
--- a/config/services.php
+++ b/config/services.php
@@ -80,6 +80,7 @@ return [
         'user_filter' => env('LDAP_USER_FILTER', '(&(uid=${user}))'),
         'version' => env('LDAP_VERSION', false),
         'email_attribute' => env('LDAP_EMAIL_ATTRIBUTE', 'mail'),
+        'follow_referrals' => env('LDAP_FOLLOW_REFERRALS', false),
     ]
 
 ];