servermon/servermon — pull request #65 by rowanthorpe (2014-09-24 16:39:35+00:00)
Title: In ldap auth filter escape chars in uid input&add inetOrgPerson check

This uses ldap module's escape_filter_chars filter to prevent opportunity for injection attack in the provided uid, and adds a check on inetOrgPerson property to the authentication. Warning: I haven't actually tested this yet but wanted to PR it now. If you are able and willing to test it feel free, or if you want me to do it, then please wait until I add a comment to this PR saying I've tested it.