ldap/bind/direct: return LDAPResultOperationsError on 5xx error

mayflower · Aug 12, 2024 · 7e11c4f · 7e11c4f
1 parent b85d824
commit 7e11c4f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/internal/outpost/ldap/bind/direct/bind.go b/internal/outpost/ldap/bind/direct/bind.go
@@ -2,6 +2,7 @@ package direct
 
 import (
  "context"
+ "regexp"
 
  "beryju.io/ldap"
  "github.com/getsentry/sentry-go"
@@ -45,6 +46,10 @@ func (db *DirectBinder) Bind(username string, req *bind.Request) (ldap.LDAPResul
  "app": db.si.GetAppSlug(),
  }).Inc()
  req.Log().WithError(err).Warning("failed to execute flow")
+ is_server_err, regex_err := regexp.MatchString(`\b5\d\d\b`, err.Error())
+ if regex_err == nil && is_server_err {
+ return ldap.LDAPResultOperationsError, nil
+ }
  return ldap.LDAPResultInvalidCredentials, nil
  }
  if !passed {