habsi/authentik
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sources/kerberos: add kiprop to ignored system principals (#11852)

Browse Source
This commit is contained in:
Marc 'risson' Schmitt
2024-10-29 17:30:33 +01:00
committed by GitHub
parent ce92f77372
commit c38adcf25a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
blueprints/system/sources-kerberos.yaml
View File

@ -38,7 +38,7 @@ entries:
name: "authentik default Kerberos User Mapping: Ignore system principals" name: "authentik default Kerberos User Mapping: Ignore system principals"
expression: | expression: |
localpart, realm = principal.rsplit("@", 1) localpart, realm = principal.rsplit("@", 1)
denied_prefixes = ["kadmin/", "krbtgt/", "K/M", "WELLKNOWN/"] denied_prefixes = ["kadmin/", "krbtgt/", "K/M", "WELLKNOWN/", "kiprop/", "changepw/"]
for prefix in denied_prefixes: for prefix in denied_prefixes:
if localpart.lower().startswith(prefix.lower()): if localpart.lower().startswith(prefix.lower()):
raise SkipObject raise SkipObject