diff --git a/addons/users_ldap/users_ldap.py b/addons/users_ldap/users_ldap.py index e4fec6a391f..eb1be3b85f1 100644 --- a/addons/users_ldap/users_ldap.py +++ b/addons/users_ldap/users_ldap.py @@ -37,14 +37,15 @@ class CompanyLDAP(osv.osv): ondelete='cascade'), 'ldap_server': fields.char('LDAP Server address', size=64, required=True), 'ldap_server_port': fields.integer('LDAP Server port', required=True), - 'ldap_binddn': fields.char('LDAP binddn', size=64, required=True), - 'ldap_password': fields.char('LDAP password', size=64, required=True), + 'ldap_binddn': fields.char('LDAP binddn', size=64), + 'ldap_password': fields.char('LDAP password', size=64), 'ldap_filter': fields.char('LDAP filter', size=64, required=True), 'ldap_base': fields.char('LDAP base', size=64, required=True), 'user': fields.many2one('res.users', 'Model User', help="Model used for user creation"), 'create_user': fields.boolean('Create user', help="Create the user if not in database"), + 'anonymous': fields.boolean('Anonymous bind'), } _defaults = { 'ldap_server': lambda *a: '127.0.0.1', @@ -75,14 +76,15 @@ class users(osv.osv): action_obj = pool.get('ir.actions.actions') cr.execute(""" SELECT id, company, ldap_server, ldap_server_port, ldap_binddn, ldap_password, - ldap_filter, ldap_base, "user", create_user + ldap_filter, ldap_base, "user", create_user, anonymous FROM res_company_ldap - WHERE ldap_server != '' and ldap_binddn != '' ORDER BY sequence""") + WHERE ldap_server != '' and anonymous = TRUE or ldap_binddn != '' ORDER BY sequence""") for res_company_ldap in cr.dictfetchall(): logger.debug(res_company_ldap) try: l = ldap.open(res_company_ldap['ldap_server'], res_company_ldap['ldap_server_port']) - if l.simple_bind_s(res_company_ldap['ldap_binddn'], res_company_ldap['ldap_password']): + if (res_company_ldap['anonymous'] or + l.simple_bind_s(res_company_ldap['ldap_binddn'], res_company_ldap['ldap_password'])): base = res_company_ldap['ldap_base'] scope = ldap.SCOPE_SUBTREE filter = filter_format(res_company_ldap['ldap_filter'], (login,)) @@ -150,8 +152,9 @@ class users(osv.osv): for res_company_ldap in user.company_id.ldaps: try: l = ldap.open(res_company_ldap.ldap_server, res_company_ldap.ldap_server_port) - if l.simple_bind_s(res_company_ldap.ldap_binddn, - res_company_ldap.ldap_password): + if (res_company_ldap.anonymous or + l.simple_bind_s(res_company_ldap.ldap_binddn, + res_company_ldap.ldap_password)): base = res_company_ldap.ldap_base scope = ldap.SCOPE_SUBTREE filter = filter_format(res_company_ldap.ldap_filter, (user.login,)) diff --git a/addons/users_ldap/users_ldap_view.xml b/addons/users_ldap/users_ldap_view.xml index b055ef2938d..47d5f41fd75 100644 --- a/addons/users_ldap/users_ldap_view.xml +++ b/addons/users_ldap/users_ldap_view.xml @@ -12,8 +12,16 @@
- - + + + +