# Pretix verify mails against ldap This is a pretix plugin that can be used to verify the user provided mails against an ldap server. This does not verify the users password.<br> WARNING: This does verify that the user registering is the owner of the mail address.
## Usage 1. Install 2. Configure in admin settings 3. Enable the plugin for your event.
## Security Conserns ### Query While we use a function of python-ldap to sanitize user input there might still be a possible exploit by inserting custom code into the ldap query. You should definitely use a read only user for ldap. User data should not be exposed as we do not print user data to the end user.
### Brutforcing Via a brutforcing attack this opens up the user to find valid mail adresses in your ldap. This is not different to a password reset feature telling you that it has (not) found an mail address.
1 maintainer
Metadata
1 maintainer
Release files for pretix-ldap-mails 1.0.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| pretix-ldap-mails-1.0.0.tar.gz | 5.9 kB | Details |
Release files / pretix-ldap-mails-1.0.0.tar.gz
| Download URL | pretix-ldap-mails-1.0.0.tar.gz |
|---|---|
| Size | 5.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c916c5353ee4ad83f787c83c3669b8a6c5f87dcfa6a24c669a9cfb77d08ee8e7
|
|
BLAKE2b-256 checksum How to use checksums |
8a072be6bb66beaf6a20c42594b6e4198f72abbac7b23cfd99f4187a94b1c1ec
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.15.0 pkginfo/1.8.2 requests/2.23.0 setuptools/41.4.0 requests-toolbelt/0.9.1 tqdm/4.55.1 CPython/2.7.17
|
