ldap/bind/direct: return LDAPResultOperationsError on 5xx error

mayflower · Jul 2, 2024 · 0c9391d · 0c9391d
1 parent fb8ad30
commit 0c9391d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/internal/outpost/ldap/bind/direct/bind.go b/internal/outpost/ldap/bind/direct/bind.go
@@ -2,6 +2,7 @@ package direct
 
 import (
 	"context"
+	"regexp"
 
 	"beryju.io/ldap"
 	"github.com/getsentry/sentry-go"
@@ -45,6 +46,10 @@ func (db *DirectBinder) Bind(username string, req *bind.Request) (ldap.LDAPResul
 			"app":          db.si.GetAppSlug(),
 		}).Inc()
 		req.Log().WithError(err).Warning("failed to execute flow")
+		is_server_err, regex_err := regexp.MatchString(`\b5\d\d\b`, err.Error())
+		if regex_err == nil && is_server_err {
+			return ldap.LDAPResultOperationsError, nil
+		}
 		return ldap.LDAPResultInvalidCredentials, nil
 	}
 	if !passed {