Home - Waterfall Grid T-Grid Console Builders Recent Builds Buildslaves Changesources - JSON API - About

Change #6566

Category None
Changed by Jeff Davis <jeff.davisohnoyoudont@bc.libraries.coop>
Changed at Fri 06 Sep 2019 17:43:24
Repository git://git.evergreen-ils.org/Evergreen.git
Project Evergreen
Branch master
Revision c485b3dcac422ad11e0cdb9d74f674e8c9f9355c


LP#1786552: optionally restrict auth_proxy login by home OU
This adds a new restrict_by_home_ou setting to auth_proxy authenticator
config.  When enabled, if the login request includes an org param, the
authenticator will refuse to authenticate a user unless their home OU
matches or is a descendant of that org; login fails and auth_proxy
proceeds to the next configured authenticator.

Signed-off-by: Jeff Davis <jeff.davis@bc.libraries.coop>
Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>

Changed files