From c0a1b692d1151162df87a2a3749e53f27833db14 Mon Sep 17 00:00:00 2001 From: Nick Couchman Date: Sun, 19 Mar 2017 20:45:52 -0400 Subject: [PATCH] GUACAMOLE-102: Fix issue with string comparison, and fully check values for ldap-dereference-aliases. --- .../guacamole/auth/ldap/ConfigurationService.java | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/extensions/guacamole-auth-ldap/src/main/java/org/apache/guacamole/auth/ldap/ConfigurationService.java b/extensions/guacamole-auth-ldap/src/main/java/org/apache/guacamole/auth/ldap/ConfigurationService.java index f29d8f106..e546414d6 100644 --- a/extensions/guacamole-auth-ldap/src/main/java/org/apache/guacamole/auth/ldap/ConfigurationService.java +++ b/extensions/guacamole-auth-ldap/src/main/java/org/apache/guacamole/auth/ldap/ConfigurationService.java @@ -241,17 +241,23 @@ public class ConfigurationService { "never" ); - if (derefAliases == "always") + if (derefAliases.equals("always")) return 3; - else if (derefAliases == "finding") + else if (derefAliases.equals("finding")) return 2; - else if (derefAliases == "searching") + else if (derefAliases.equals("searching")) return 1; - else + else if (derefAliases.equals("never")) return 0; + + else { + logger.error("Invalid value given for ldap-dereference-aliases."); + logger.debug("Received {} but expected one of the following: always, finding, searching, never.", derefAliases); + throw new GuacamoleException("Invalid valid for ldap-dereference-aliases."); + } }