Werk #14382: Don't leak LDAP server address when connection fails

Component Setup
Title Don't leak LDAP server address when connection fails
Date Aug 23, 2022
Checkmk Edition Checkmk Raw (CRE)
Checkmk Version 1.6.0p30 2.0.0p28 2.1.0p11 2.2.0b1
Level Trivial Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Prior to this Werk, trying to authenticate to an LDAP server that is unavailable would result in an error saying that the server could be contacted. This leaks the address of the LDAP server. In addition, it was possible to check if a user is a htpasswd user, since the LDAP connection is not attempted for these users and LDAP error is not shown.

Now a generic "invalid login" message is shown to avoid this information disclosure.

To the list of all Werks