ldap/bind/direct: return LDAPResultOperationsError on 5xx error

mayflower · Aug 12, 2024 · 7e11c4f · 7e11c4f
1 parent b85d824
commit 7e11c4f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/internal/outpost/ldap/bind/direct/bind.go b/internal/outpost/ldap/bind/direct/bind.go
@@ -2,6 +2,7 @@ package direct
 
 import (
 	"context"
+	"regexp"
 
 	"beryju.io/ldap"
 	"github.com/getsentry/sentry-go"
@@ -45,6 +46,10 @@ func (db *DirectBinder) Bind(username string, req *bind.Request) (ldap.LDAPResul
 			"app":          db.si.GetAppSlug(),
 		}).Inc()
 		req.Log().WithError(err).Warning("failed to execute flow")
+		is_server_err, regex_err := regexp.MatchString(`\b5\d\d\b`, err.Error())
+		if regex_err == nil && is_server_err {
+			return ldap.LDAPResultOperationsError, nil
+		}
 		return ldap.LDAPResultInvalidCredentials, nil
 	}
 	if !passed {