Commit 35ecb8d9 authored by Joel Rennich's avatar Joel Rennich

don't check for password before demobilization in case of FV sign in

parent c0b94d6b
Pipeline #59345837 passed with stage
in 2 minutes and 42 seconds
......@@ -25,6 +25,8 @@ enum Preferences: String {
case CreateAdminIfGroupMember
/// Should existing mobile accounts be converted into plain local accounts? Set as a Bool`.
case DemobilizeUsers
/// should we check for a password in the hints before demobilzing the user?
case DemobilizeForcePasswordCheck
/// Dissallow local auth, and always do network authentication
case DenyLocal
/// Users to allow locally when DenyLocal is on
......
......@@ -61,14 +61,16 @@ class DeMobilize : NoLoMechanism {
return
}
// sanity check to ensure we have valid information and a local user
os_log("Checking for password", log: demobilizeLog, type: .debug)
if passwordContext == nil {
os_log("Something went wrong, there is no password in user data", log: demobilizeLog, type: .error)
// nothing to see here, most likely auth failed earlier on
// we're just here for auditing purposes
_ = allowLogin()
return
if (getManagedPreference(key: Preferences.DemobilizeForcePasswordCheck) as? Bool ?? false) {
// sanity check to ensure we have valid information and a local user
os_log("Checking for password", log: demobilizeLog, type: .debug)
if passwordContext == nil {
os_log("Something went wrong, there is no password in user data", log: demobilizeLog, type: .error)
// nothing to see here, most likely auth failed earlier on
// we're just here for auditing purposes
_ = allowLogin()
return
}
}
// get local user record
......
......@@ -15,9 +15,9 @@
<key>CFBundlePackageType</key>
<string>BNDL</string>
<key>CFBundleShortVersionString</key>
<string>1.3.0</string>
<string>1.3.1</string>
<key>CFBundleVersion</key>
<string>335</string>
<string>337</string>
<key>NSHumanReadableCopyright</key>
<string>Copyright © 2019 Orchard &amp; Grove. All rights reserved.</string>
<key>NSPrincipalClass</key>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment