scripte/archivmail
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

debug: temporäres LDAP-Logging für Fehlerdiagnose

Browse Source
This commit is contained in:
sysops
2026-04-01 00:05:35 +02:00
parent d7b01504aa
commit 5c3a9b55ff
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/auth/auth.go
+9
View File
@@ -89,8 +89,14 @@ func (m *Manager) Login(username, password string) (token string, user *userstor
if domain := extractDomain(username); domain != "" { if domain := extractDomain(username); domain != "" {
ctx := context.Background() ctx := context.Background()
tenantID, lookupErr := m.tenantLookup.GetTenantIDByDomain(ctx, domain) tenantID, lookupErr := m.tenantLookup.GetTenantIDByDomain(ctx, domain)
if lookupErr != nil {
fmt.Printf("[DEBUG] tenant domain lookup failed for %q: %v\n", domain, lookupErr)
}
if lookupErr == nil && tenantID != nil { if lookupErr == nil && tenantID != nil {
tcfg, tErr := m.tenantLdapStore.GetWithPassword(ctx, *tenantID) tcfg, tErr := m.tenantLdapStore.GetWithPassword(ctx, *tenantID)
if tErr != nil {
fmt.Printf("[DEBUG] tenant LDAP GetWithPassword failed: %v\n", tErr)
}
if tErr == nil && tcfg != nil && tcfg.Enabled && tcfg.URL != "" && tcfg.BindPassword != "" { if tErr == nil && tcfg != nil && tcfg.Enabled && tcfg.URL != "" && tcfg.BindPassword != "" {
attrs, authErr := ldapauth.Authenticate(ldapauth.Config{ attrs, authErr := ldapauth.Authenticate(ldapauth.Config{
URL: tcfg.URL, URL: tcfg.URL,
@@ -101,6 +107,9 @@ func (m *Manager) Login(username, password string) (token string, user *userstor
TLS: tcfg.TLS, TLS: tcfg.TLS,
TLSSkipVerify: tcfg.TLSSkipVerify, TLSSkipVerify: tcfg.TLSSkipVerify,
}, username, password) }, username, password)
if authErr != nil {
fmt.Printf("[DEBUG] tenant LDAP auth failed for %q: %v\n", username, authErr)
}
if authErr == nil { if authErr == nil {
role := tcfg.DefaultRole role := tcfg.DefaultRole
if role == "" { if role == "" {