In C4::Auth->checkpw the authentication methods are in an elsif loop. When both methods are enabled the ldap loop catches the login, fails because it doesn't have the correct information, and a shibboleth login is not passed through.
Interesting. Has that changed in recent versions? We have a library using Shibboleth and LDAP with 16.11
(In reply to Katrin Fischer from comment #1) > Interesting. Has that changed in recent versions? We have a library using > Shibboleth and LDAP with 16.11 It may be specific to the LDAP setup with 'auth_by_bind' activated - I think we are seeing the connection refused so login failed as we don't have good user/pass info for auth_by_bind
I was hoping to help narrow it down with the version comment - but not sure what setup we are using :(
*** This bug has been marked as a duplicate of bug 20879 ***