Ashesh Vashi
269e32d5ee
Ensure Kerberos and internal authentication only log in the account of the user they authenticated. #10675
...
The same username may exist under several auth sources. Kerberos uses
the shared login(), which looked the account up by username alone, so a
Kerberos principal matching an internal account's username was logged in
as that internal account, including the initial administrator. login()
now looks the account up by the authenticated username and the source
that authenticated it.
form.user is no longer used by any source but internal. Flask-Security's
validation, run for internal authentication, sets it to the account whose
email was typed, whether or not its password matched. With internal
authentication listed first, a Kerberos user could type another Kerberos
user's principal and be logged in as them, and an LDAP user could do the
same with an LDAP account whose email is their username. Internal login
logs in form.user, whose password was verified, only if it is an
internal account, and otherwise nothing.
The LDAP + Internal login test relied on an LDAP bind that accepted the
internal test account's credentials logging in that internal account,
which is the behaviour fixed here. LDAP now refuses those credentials in
that scenario, and new scenarios check that an LDAP login whose username
matches an internal account is not logged in as it, with LDAP or
internal authentication tried first. A further test logs in through the
login endpoint as a Kerberos user who types another Kerberos user's
principal. The LDAP documentation's add-external-user example passed the
source as an argument; it is given with --auth-source.
2026-10-24 19:36:14 +05:30
..
2026-10-14 12:08:07 +01:00
2024-06-12 18:09:06 +05:30
2016-06-07 09:04:58 +01:00
2022-07-11 13:39:09 +05:30
2026-08-17 14:25:47 +01:00
2025-07-31 11:30:19 +05:30
2025-07-31 11:30:19 +05:30
2019-03-08 15:29:05 +00:00
2026-10-12 17:16:24 +01:00
2025-11-28 15:40:48 +00:00
2026-10-12 17:16:24 +01:00
2023-08-17 14:00:56 +05:30
2021-09-24 21:01:56 +05:30
2022-08-11 10:25:52 +05:30
2026-09-22 17:15:12 +01:00
2026-09-22 17:15:12 +01:00
2021-09-26 22:03:11 +05:30
2024-05-27 16:11:59 +05:30
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2026-10-12 14:28:49 +01:00
2025-11-28 15:40:48 +00:00
2026-10-12 14:28:49 +01:00
2024-07-02 10:34:30 +05:30
2026-01-05 13:33:45 +05:30
2026-01-05 13:33:45 +05:30
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2021-09-26 22:03:11 +05:30
2026-06-16 15:36:24 +05:30
2026-10-14 14:27:01 +01:00
2019-03-12 14:24:46 +00:00
2024-05-27 16:11:59 +05:30
2022-04-22 15:58:06 +05:30
2026-10-14 15:44:33 +01:00
2022-09-22 18:24:14 +05:30
2025-11-28 15:40:48 +00:00
2024-03-27 11:40:23 +05:30
2024-03-18 11:53:59 +05:30
2024-03-18 11:53:59 +05:30
2024-03-18 11:53:59 +05:30
2024-05-27 16:11:59 +05:30
2022-03-15 14:54:22 +00:00
2025-07-31 11:30:19 +05:30
2026-02-17 17:16:06 +05:30
2025-03-17 12:22:06 +05:30
2021-09-24 21:01:56 +05:30
2025-11-28 15:40:48 +00:00
2026-10-13 00:56:35 +01:00
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2021-09-26 22:03:11 +05:30
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2022-11-14 19:28:48 +05:30
2021-10-14 11:13:16 +05:30
2021-09-26 22:03:11 +05:30
2021-09-24 21:01:56 +05:30
2025-11-28 15:40:48 +00:00
2021-09-24 21:01:56 +05:30
2021-09-24 21:01:56 +05:30
2021-09-24 21:01:56 +05:30
2021-09-24 21:01:56 +05:30
2026-10-14 12:08:07 +01:00
2022-08-11 10:25:52 +05:30
2025-11-28 15:40:48 +00:00
2025-04-30 17:51:04 +05:30
2026-10-12 21:56:11 +01:00
2026-02-24 12:14:36 +05:30
2026-09-30 17:28:49 +01:00
2026-10-24 19:36:12 +05:30
2026-10-12 17:16:28 +01:00
2025-11-28 15:40:48 +00:00
2026-10-24 19:36:14 +05:30
2026-01-05 13:33:45 +05:30
2026-05-05 15:03:00 +05:30
2025-11-28 15:40:48 +00:00
2017-03-27 22:10:39 -04:00
2025-04-30 17:51:04 +05:30
2025-03-03 18:45:21 +05:30
2026-10-02 11:23:44 +01:00
2023-06-08 18:47:50 +05:30
2025-11-28 15:40:48 +00:00
2026-09-22 17:15:12 +01:00
2026-10-15 19:30:20 +01:00
2020-10-28 12:33:56 +05:30
2026-10-14 17:19:12 +01:00
2021-09-26 22:03:11 +05:30
2020-10-28 12:33:56 +05:30
2021-09-26 22:03:11 +05:30
2019-03-08 15:29:05 +00:00
2024-05-20 16:54:49 +05:30
2024-05-20 16:54:49 +05:30
2026-09-30 17:28:49 +01:00
2026-10-12 17:17:43 +01:00
2021-09-26 22:03:11 +05:30
2025-11-28 15:40:48 +00:00
2025-04-30 17:51:04 +05:30
2024-12-16 14:52:56 +05:30
2023-05-30 16:45:13 +05:30
2026-10-12 17:17:43 +01:00
2026-08-17 14:25:47 +01:00
2019-03-08 15:29:05 +00:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-05 11:38:12 +01:00
2019-07-22 18:42:48 +05:30
2019-08-20 09:39:31 +05:30
2019-09-16 19:09:22 +05:30
2019-12-05 06:35:57 -05:00
2019-11-12 17:48:10 +05:30
2019-12-12 15:06:33 +00:00
2020-01-07 18:45:07 +05:30
2020-02-05 14:36:05 +05:30
2020-03-02 17:28:20 +05:30
2020-03-30 17:31:50 +05:30
2020-04-28 11:00:23 +05:30
2020-05-25 17:05:47 +05:30
2020-06-22 17:09:10 +05:30
2020-07-21 18:14:49 +05:30
2020-08-18 11:15:24 +01:00
2020-09-15 13:19:00 +05:30
2020-10-12 13:49:54 +05:30
2020-11-09 12:44:00 +05:30
2020-12-10 18:13:04 +05:30
2021-01-25 12:18:47 +05:30
2021-02-22 16:47:16 +05:30
2021-03-22 14:47:19 +05:30
2021-04-22 17:29:04 +05:30
2021-05-17 13:08:38 +05:30
2021-06-14 16:59:04 +05:30
2021-09-09 12:44:37 +05:30
2021-08-09 14:29:31 +05:30
2021-09-02 14:51:50 +05:30
2021-10-06 17:05:28 +05:30
2021-10-19 17:21:46 +05:30
2021-11-15 16:31:40 +05:30
2021-12-14 16:42:06 +05:30
2022-02-19 10:29:02 +05:30
2022-02-19 10:29:02 +05:30
2022-03-07 15:28:28 +05:30
2022-03-14 15:26:54 +00:00
2022-04-04 17:00:18 +05:30
2022-05-09 12:39:29 +05:30
2022-05-28 13:26:17 +05:30
2022-06-27 19:36:20 +05:30
2022-07-19 15:27:47 +05:30
2022-09-05 15:30:24 +05:30
2022-09-22 10:12:08 +01:00
2022-10-17 15:28:08 +05:30
2022-11-17 16:51:02 +05:30
2022-11-30 12:02:45 +05:30
2022-12-14 15:56:05 +05:30
2023-01-16 19:34:33 +05:30
2023-02-06 15:58:33 +05:30
2023-03-08 17:37:45 +05:30
2023-04-11 19:09:26 +05:30
2023-05-03 15:21:01 +05:30
2023-05-29 11:03:39 +05:30
2023-06-05 13:07:32 +05:30
2023-07-04 10:44:46 +05:30
2023-07-24 12:49:42 +05:30
2023-08-16 15:32:17 +05:30
2023-09-18 18:57:29 +05:30
2023-10-17 15:19:40 +05:30
2023-11-20 17:31:39 +05:30
2023-12-07 20:06:01 +05:30
2024-01-08 12:16:49 +05:30
2024-02-08 12:24:40 +05:30
2024-03-04 13:22:09 +05:30
2024-04-09 08:37:41 +05:30
2024-04-29 13:41:02 +05:30
2024-05-27 16:14:43 +05:30
2024-06-04 18:18:16 +05:30
2024-06-24 20:10:25 +05:30
2024-07-24 15:47:42 +05:30
2024-08-22 17:47:40 +05:30
2024-09-20 08:45:37 +05:30
2024-11-07 22:02:18 +05:30
2024-12-09 11:51:07 +05:30
2025-02-03 14:26:57 +05:30
2025-02-25 16:50:45 +05:30
2025-04-02 15:15:23 +05:30
2025-04-23 15:41:43 +05:30
2025-05-24 15:23:17 +05:30
2025-06-27 13:36:31 +05:30
2025-07-23 17:56:15 +05:30
2025-08-18 15:59:05 +05:30
2025-09-25 15:50:14 +05:30
2026-06-09 15:22:33 +01:00
2025-11-10 11:27:56 +05:30
2025-12-08 11:30:36 +05:30
2026-02-02 15:13:14 +05:30
2026-03-02 17:06:53 +05:30
2026-03-30 17:44:32 +05:30
2026-05-06 12:46:58 +05:30
2026-06-16 11:47:25 +05:30
2026-07-28 12:40:25 +05:30
2026-09-15 17:02:00 +05:30
2026-09-07 15:02:01 +05:30
2024-03-28 12:19:34 +05:30
2025-03-03 18:45:21 +05:30
2026-10-12 17:16:24 +01:00
2022-10-20 16:18:41 +05:30
2024-06-12 17:18:55 +05:30
2026-01-20 11:53:32 +05:30
2021-07-07 10:44:02 +05:30
2021-10-14 11:44:03 +05:30
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2023-03-28 22:20:14 +05:30
2025-11-28 15:40:48 +00:00
2026-09-22 17:03:47 +01:00
2026-10-24 19:36:14 +05:30
2021-09-27 12:29:39 +05:30
2026-10-02 11:23:44 +01:00
2023-03-29 13:49:32 +05:30
2022-09-22 18:24:14 +05:30
2025-09-29 12:52:47 +05:30
2021-10-14 11:13:16 +05:30
2024-07-18 09:40:49 +05:30
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2025-07-31 17:06:40 +05:30
2019-03-08 15:29:05 +00:00
2025-07-16 18:02:24 +05:30
2021-09-26 22:03:11 +05:30
2025-11-28 15:40:48 +00:00
2025-11-28 15:40:48 +00:00
2023-06-19 15:09:48 +05:30
2024-12-16 14:52:56 +05:30
2026-02-24 16:46:31 +05:30
2021-09-24 21:01:56 +05:30
2020-10-28 12:33:56 +05:30
2025-11-28 15:40:48 +00:00
2022-04-28 12:04:56 +05:30
2026-09-04 19:06:51 +00:00