dotnet / dotnet/aspnetcore

Negotiate\LdapAdapter.cs should query only for required LDAP attributes instead of all available.

Open
#32,037 2 comments 0 reactions 0 assignees View on GitHub
area-auth enhancement Needs: Design
Dominant language
C#
Stars
38.4k
Forks
10.9k
Avg merge
2d 5h
Merged PRs (30d)
276

Description

### Describe the bug
In internal class `Microsoft.AspNetCore.Authentication.Negotiate.LdapAdapter`, `SearchRequest`s are constructed using `attributeList: null`, which means _query for all available attributes_.

`LdapAdapter` should query only for attributes it requires (`memberOf` and, possibly, `distinguishedName`).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.