Affected by GO-2022-0704 and 17 other vulnerabilities

GO-2022-0704: Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor

GO-2022-0781: Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0818: Missing Authorization in Harbor in github.com/goharbor/harbor

GO-2022-0853: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0863: Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2022-0876: Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2022-0883: SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

ldap

package

v1.8.0 Latest Latest Go to latest Published: May 17, 2019 License: Apache-2.0 Imports: 13 Imported by: 40

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/goharbor/harbor

Links

Documentation ¶

Index ¶

type Auth

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Auth ¶

type Auth struct {
	auth.DefaultAuthenticateHelper
}

Auth implements AuthenticateHelper interface to authenticate against LDAP

func (*Auth) Authenticate ¶

func (l *Auth) Authenticate(m models.AuthModel) (*models.User, error)

Authenticate checks user's credential against LDAP based on basedn template and LDAP URL, if the check is successful a dummy record will be inserted into DB, such that this user can be associated to other entities in the system.

func (*Auth) OnBoardGroup ¶

func (l *Auth) OnBoardGroup(u *models.UserGroup, altGroupName string) error

OnBoardGroup -- Create Group in harbor DB, if altGroupName is not empty, take the altGroupName as groupName in harbor DB.

func (*Auth) OnBoardUser ¶

func (l *Auth) OnBoardUser(u *models.User) error

OnBoardUser will check if a user exists in user table, if not insert the user and put the id in the pointer of user model, if it does exist, return the user's profile.

func (*Auth) PostAuthenticate ¶

func (l *Auth) PostAuthenticate(u *models.User) error

PostAuthenticate -- If user exist in harbor DB, sync email address, if not exist, call OnBoardUser

func (*Auth) SearchGroup ¶

func (l *Auth) SearchGroup(groupKey string) (*models.UserGroup, error)

SearchGroup -- Search group in ldap authenticator, groupKey is LDAP group DN.

func (*Auth) SearchUser ¶

func (l *Auth) SearchUser(username string) (*models.User, error)

SearchUser -- Search user in ldap

Source Files ¶

View all Source files

ldap.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL