feat: try anonymous bind when bind credentials are empty (#979)

nv6 · web-flow · commit 364175adc03c · 2026-07-08T17:11:30.000+03:00
diff --git a/internal/service/ldap_service.go b/internal/service/ldap_service.go
@@ -246,6 +246,12 @@ func (ldap *LdapService) BindService(rebind bool) error {
 	if ldap.cert != nil {
 		return ldap.conn.ExternalBind()
 	}
+
+	// attempt unauthenticated/anonymous bind if both BindDN and bindpw are unset
+	if ldap.config.LDAP.BindDN == "" && ldap.bindPw == "" {
+		return ldap.conn.UnauthenticatedBind("")
+	}
+
 	return ldap.conn.Bind(ldap.config.LDAP.BindDN, ldap.bindPw)
 }
 

Original file line number	Diff line number	Diff line change
`@@ -246,6 +246,12 @@ func (ldap *LdapService) BindService(rebind bool) error {`
`246`	`246`	`if ldap.cert != nil {`
`247`	`247`	`return ldap.conn.ExternalBind()`
`248`	`248`	`}`
	`249`	`+`
	`250`	`+ // attempt unauthenticated/anonymous bind if both BindDN and bindpw are unset`
	`251`	`+ if ldap.config.LDAP.BindDN == "" && ldap.bindPw == "" {`
	`252`	`+ return ldap.conn.UnauthenticatedBind("")`
	`253`	`+ }`
	`254`	`+`
`249`	`255`	`return ldap.conn.Bind(ldap.config.LDAP.BindDN, ldap.bindPw)`
`250`	`256`	`}`
`251`	`257`