Bugzilla – Bug List
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Thu Aug 14 2025 00:13:06 UTC
Daft Punk tried Koha then they wrote the song "Harder, Better, Faster, Stronger"
Hide Search Description
Component:
Authentication
Product:
Koha
Status:
UNCONFIRMED, REOPENED, NEW, CONFIRMED, ASSIGNED, In Discussion, Needs Signoff, Signed Off, Passed QA, Failed QA, Patch doesn't apply, Pushed to main, Pushed to stable, Pushed to oldstable, Pushed to oldoldstable, Pushed to oldoldoldstable, Needs documenting, BLOCKED
102 bugs found.
ID
Product
Comp
Assignee
▲
Status
▲
Resolution
Summary
Changed
38022
Koha
Authenti
koha-bugs
UNCONFIRMED
---
Identity Provider error 500 on /api
2024-10-18
39222
Koha
Authenti
koha-bugs
REOPENED
---
Error 403 when login OPAC and Intranet
2025-03-17
31050
Koha
Authenti
koha-bugs
REOPENED
---
Standardize session setup
2025-02-13
31596
Koha
Authenti
koha-bugs
NEW
---
LDAP ACTIVE DIRECTORY with different domain suffix
2023-01-18
21187
Koha
Authenti
koha-bugs
NEW
---
GDPR: Regularly force patrons password renew
2023-10-02
21191
Koha
Authenti
koha-bugs
NEW
---
GDPR: Script to block inactive users (with no successful logins on a defined period)
2019-10-25
18587
Koha
Authenti
martin.renvoize
NEW
---
LDAP: update_local is entirely untested!
2019-11-07
35002
Koha
Authenti
koha-bugs
NEW
---
Identity Providers stop working after Apache Reload/Restart
2023-10-06
18016
Koha
Authenti
dpavlin
NEW
---
C4::Auth_with_ldap::ldap_entry_2_hash inserts 0000-00-00 for invalid dateofbirth
2024-05-09
8785
Koha
Authenti
gmcharlt
NEW
---
Basic authentication troubleshootings
2023-07-29
8865
Koha
Authenti
gmcharlt
NEW
---
Re-logging in needs to pass POST & GET arguments
2021-02-05
11920
Koha
Authenti
gmcharlt
NEW
---
Staff pages should default to requiring "catalogue" permission
2018-05-16
14023
Koha
Authenti
gmcharlt
NEW
---
Specify Attribute Mapping for CAS Authentication
2016-10-28
15204
Koha
Authenti
gmcharlt
NEW
---
Auth.pm does too much
2024-02-15
15205
Koha
Authenti
gmcharlt
NEW
---
Factor 'SyndeticsEnabled' out of Auth.pm
2023-08-28
15428
Koha
Authenti
gmcharlt
NEW
---
Different timeout preference for OPAC and staff interface
2025-05-13
17113
Koha
Authenti
gmcharlt
NEW
---
Unable to search multi-domain Active Directory forest due LDAP required base
2020-01-11
18615
Koha
Authenti
gmcharlt
NEW
---
LDAP configuration error causes server resource depletion under Plack
2017-07-26
39224
Koha
Authenti
jacob.omara
NEW
---
Move Shibboleth config from koha-conf to the DB
2025-03-03
31912
Koha
Authenti
jonathan.druart
NEW
---
When enforcing 2FA we should alert the user
2024-11-15
14035
Koha
Authenti
koha-bugs
NEW
---
Shibboleth SingleSignOut
2025-08-06
15474
Koha
Authenti
koha-bugs
NEW
---
Enable to update LDAP entries from Koha
2023-08-28
18065
Koha
Authenti
koha-bugs
NEW
---
Initials are not generated correctly by LDAP when firstname or surname start with umlauts
2017-12-28
20266
Koha
Authenti
koha-bugs
NEW
---
Authentication using Shibboleth - bootstrap
2023-06-06
20649
Koha
Authenti
koha-bugs
NEW
---
C4::Auth should use C4::Context->IsSuperLibrarian()
2019-03-04
20735
Koha
Authenti
koha-bugs
NEW
---
Multiple LDAP servers
2018-09-14
21577
Koha
Authenti
koha-bugs
NEW
---
Enable Koha to act as Shibboleth identity provider
2023-10-19
22459
Koha
Authenti
koha-bugs
NEW
---
Shibboleth create/sync: Allow mapping of extended patron attributes
2019-03-05
22933
Koha
Authenti
koha-bugs
NEW
---
Support for FIDO WebAuthn (passwordless)
2020-03-03
25259
Koha
Authenti
koha-bugs
NEW
---
Tumblebooks Integration
2020-04-23
25512
Koha
Authenti
koha-bugs
NEW
---
Add support for LDAPS
2023-02-02
25613
Koha
Authenti
koha-bugs
NEW
---
Broken workflow on CAS login with wrong permissions
2023-09-22
25934
Koha
Authenti
koha-bugs
NEW
---
[OMNIBUS] Passwords should be more complex / password policy complexity
2023-02-22
25935
Koha
Authenti
koha-bugs
NEW
---
Use time-based mechanism for account lockout
2020-07-20
25937
Koha
Authenti
koha-bugs
NEW
---
Notify patrons about failed login attempts
2020-07-06
27957
Koha
Authenti
koha-bugs
NEW
---
Attributes removed in LDAP
2023-07-05
28109
Koha
Authenti
koha-bugs
NEW
---
Add a 'koha only' authentication path
2023-07-01
28587
Koha
Authenti
koha-bugs
NEW
---
ldap auth fails unless <ldapserver id="ldapserver">
2021-06-23
28780
Koha
Authenti
koha-bugs
NEW
---
Auth_with_ldap only searches tree with anon_bind
2021-07-29
29835
Koha
Authenti
koha-bugs
NEW
---
2FA - ask for the users password when they choose to disable 2FA
2024-02-16
29836
Koha
Authenti
koha-bugs
NEW
---
2FA - provide a REST API challenge route
2024-11-15
30348
Koha
Authenti
koha-bugs
NEW
---
Create sub clear_session_and_cookies
2023-06-19
30605
Koha
Authenti
koha-bugs
NEW
---
New password should be more than just unequal to old password
2023-06-17
31118
Koha
Authenti
koha-bugs
NEW
---
Allow to send the TOTP token by email when enabling 2FA
2024-11-15
31851
Koha
Authenti
koha-bugs
NEW
---
Allow prioritizing identity providers
2022-10-18
31900
Koha
Authenti
koha-bugs
NEW
---
Add support for logout from external OAuth2/OIDC identity providers
2025-08-06
31990
Koha
Authenti
koha-bugs
NEW
---
Shibboleth may redirect to OPAC if staff interface and OPAC are served on same hostname.
2023-06-11
32133
Koha
Authenti
koha-bugs
NEW
---
Streamline OIDC error messages
2022-11-09
32385
Koha
Authenti
koha-bugs
NEW
---
OPAC and staff (intranet) should not share the same session and cookie
2023-04-23
32553
Koha
Authenti
koha-bugs
NEW
---
Don't allow to use the same password as before when a password expires/is reset
2023-06-17
32599
Koha
Authenti
koha-bugs
NEW
---
Shibboleth Autocreate error
2023-01-09
33042
Koha
Authenti
koha-bugs
NEW
---
Enforce 4 character groups (lowercase, uppercase, numbers and special characters) in passwords
2023-02-22
33517
Koha
Authenti
koha-bugs
NEW
---
Add support for extended attributes mapping on IdP config
2023-04-13
33538
Koha
Authenti
koha-bugs
NEW
---
Allow for independent shibboleth autocreate and sync mapping
2024-04-10
33768
Koha
Authenti
koha-bugs
NEW
---
We need tests for the OAuth2/OIDC client
2023-10-10
33782
Koha
Authenti
koha-bugs
NEW
---
Oauth2/OIDC identity providers code is not covered by unit tests
2023-10-10
34670
Koha
Authenti
koha-bugs
NEW
---
Problem with system preference casServerUrl persistency
2023-08-31
34806
Koha
Authenti
koha-bugs
NEW
---
Identity Provider Single-Logout Enhancement
2024-09-01
34903
Koha
Authenti
koha-bugs
NEW
---
Add ability to turn Shibboleth on/off for staff/opac
2023-09-25
35210
Koha
Authenti
koha-bugs
NEW
---
2FA: more flexibility
2024-11-15
36011
Koha
Authenti
koha-bugs
NEW
---
2FA authentication failure is incorrectly logged as success
2024-11-15
36771
Koha
Authenti
koha-bugs
NEW
---
Internal routines are ignoring the patrons found during credential checks
2024-05-03
36893
Koha
Authenti
koha-bugs
NEW
---
Shibboleth Login not honouring branch selector
2024-10-28
37541
Koha
Authenti
koha-bugs
NEW
---
Changing password after turning on password expiration results in setting of NEVER
2024-07-31
37864
Koha
Authenti
koha-bugs
NEW
---
Notify patron that the session is about to expire
2024-09-09
37894
Koha
Authenti
koha-bugs
NEW
---
Staff logout SSO issue
2024-09-11
38815
Koha
Authenti
koha-bugs
NEW
---
Optionally block local login of accounts set for SSO
2025-01-02
39895
Koha
Authenti
koha-bugs
NEW
---
Catalog Concern login doesn't work for CAS or Shibboleth
2025-05-20
39943
Koha
Authenti
koha-bugs
NEW
---
Add a separate PIN code field for accessing self service devices
2025-05-20
39370
Koha
Authenti
kyle
NEW
---
staff authentication (success or fail) should always be logged
2025-03-19
12680
Koha
Authenti
martin.renvoize
NEW
---
Shibboleth adaptive config
2025-08-06
12681
Koha
Authenti
martin.renvoize
NEW
---
Shibboleth attributes may contain lists
2018-09-28
12682
Koha
Authenti
martin.renvoize
NEW
---
Shibboleth attribute manipulation
2021-04-16
20627
Koha
Authenti
martin.renvoize
NEW
---
Prevent leakages of user permissions to api access tokens
2022-10-06
28093
Koha
Authenti
martin.renvoize
NEW
---
Additional configuration option(s) for Shibboleth-only mode
2023-05-01
18992
Koha
Authenti
nick
NEW
---
LDAP fallback behaviour not consistent
2021-02-04
18237
Koha
Authenti
olli-antti.kivi...
ASSIGNED
---
Can't use a hash as a reference at docs/CAS/CASProxy/examples/proxy_cas_data.pl line 60.
2018-04-19
27305
Koha
Authenti
dcook
In Discussion
---
Use low privileged tokens to enable authenticated iCal feed
2024-11-06
19886
Koha
Authenti
koha-bugs
In Discussion
---
Two Factor Authentication: Yubikey
2022-04-22
20632
Koha
Authenti
koha-bugs
In Discussion
---
Staff users without superlibrarian can't log into OPAC
2023-02-02
18549
Koha
Authenti
mtompset
In Discussion
---
There should be a warning that logging out of Koha will leave browser session logged in to OAuth
2019-10-21
11808
Koha
Authenti
hammat.wele
Needs Signoff
---
When searching for a cardnumber in the intranet, also try to search for it on the LDAP server if one is configured and add/update user
2025-03-31
39601
Koha
Authenti
koha-bugs
Needs Signoff
---
Add passkey support to Koha as an authentication mechanism
Mon 06:28
35617
Koha
Authenti
slavashishkin
Needs Signoff
---
Make phone number as match point in in Identity providers
2024-09-27
30724
Koha
Authenti
tomascohen
Needs Signoff
---
Add ability for administrator to reset a users 2FA
2025-07-31
37711
Koha
Authenti
tomascohen
Signed Off
---
IdP auto-register should work on the staff interface
2025-08-07
33259
Koha
Authenti
alexbuckley
Failed QA
---
Optionally set SameSite attribute of cookie to Strict
2025-04-09
20340
Koha
Authenti
alex.arnaud
Failed QA
---
Ability to use authentication plugin
2024-10-18
38258
Koha
Authenti
baptiste.wojtko...
Failed QA
---
Connecting without a proper CGI cookie can disconnect all sessions
2024-11-05
8993
Koha
Authenti
koha-bugs
Failed QA
---
LDAP authentication improvements: multiple branch and transformation modules
2022-08-22
29783
Koha
Authenti
koha-bugs
Failed QA
---
Account lockout message appears incorrectly for blank userid
2023-04-03
32203
Koha
Authenti
koha-bugs
Failed QA
---
Refactor checkauth() auth rejected to improve maintainability
2023-09-20
16694
Koha
Authenti
magnus
Failed QA
---
Limit SIP2 auth by patron attribute
2024-12-10
27312
Koha
Authenti
magnus
Failed QA
---
Add a syspref to redirect patron after self registration
2022-01-25
34164
Koha
Authenti
vanoudt
Failed QA
---
OAuth2/OIDC should redirect to page that initiated login
2025-01-08
36617
Koha
Authenti
vanoudt
Failed QA
---
The old googleopenidconnect service should redirect to page that initiated login
2025-01-08
39135
Koha
Authenti
imani.thomas
Patch doesn't apply
---
adding a OpacPasswordLabelTextContent system preference
2025-03-31
13932
Koha
Authenti
robin
Patch doesn't apply
---
Allow a header to be considered trusted to provide the userid
2024-03-09
36026
Koha
Authenti
lukasz.koszyk
Needs documenting
---
Add TLS MySQL connection without mutual authentication
2025-04-10
39874
Koha
Authenti
oleonard
Needs documenting
---
Template error prevents authority merging
2025-08-04
7174
Koha
Authenti
olli-antti.kivi...
BLOCKED
---
Authentication rewriting
2025-05-07
14540
Koha
Authenti
olli-antti.kivi...
BLOCKED
---
Move member-flags.pl to PermissionsManager to better manage permissions for testing.
2021-05-13
102 bugs found.
Change Columns
Edit Search
as
File a new bug in the "Authentication" component of the "Koha" product