auth ldap/ad: compare group member dn case-insensitively

[pve-access-control.git] / src / PVE / Auth / LDAP.pm

diff --git a/src/PVE/Auth/LDAP.pm b/src/PVE/Auth/LDAP.pm
index 97d077886cd904863b65270580da8f46fb62f376..4792586673ec815a1945d6f40437dc8f1d0cadea 100755 (executable)
--- a/src/PVE/Auth/LDAP.pm
+++ b/src/PVE/Auth/LDAP.pm
@@ -310,7 +310,7 @@ sub get_users {
 
        if (wantarray) {
            my $dn = $user->{dn};
-           $dnmap->{$dn} = $username;
+           $dnmap->{lc($dn)} = $username;
        }
     }
 
@@ -351,7 +351,7 @@ sub get_groups {
 
            $ret->{$name} = { users => {} };
            foreach my $member (@{$group->{members}}) {
-               if (my $user = $dnmap->{$member}) {
+               if (my $user = $dnmap->{lc($member)}) {
                    $ret->{$name}->{users}->{$user} = 1;
                }
            }