Bug 20943

Summary: Cannot enable shibboleth and LDAP at the same time
Product: Koha Reporter: Nick Clemens (kidclamp) <nick>
Component: AuthenticationAssignee: Nick Clemens (kidclamp) <nick>
Status: RESOLVED DUPLICATE QA Contact: Testopia <testopia>
Severity: normal    
Priority: P5 - low CC: dpavlin, josef.moravec, katrin.fischer, martin.renvoize
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:

Description Nick Clemens (kidclamp) 2018-06-14 13:57:21 UTC
In C4::Auth->checkpw the authentication methods are in an elsif loop. When both methods are enabled the ldap loop catches the login, fails because it doesn't have the correct information, and a shibboleth login is not passed through.
Comment 1 Katrin Fischer 2018-06-18 18:28:33 UTC
Interesting. Has that changed in recent versions? We have a library using Shibboleth and LDAP with 16.11
Comment 2 Nick Clemens (kidclamp) 2018-06-19 15:51:33 UTC
(In reply to Katrin Fischer from comment #1)
> Interesting. Has that changed in recent versions? We have a library using
> Shibboleth and LDAP with 16.11

It may be specific to the LDAP setup with 'auth_by_bind' activated - I think we are seeing the connection refused so login failed as we don't have good user/pass info for auth_by_bind
Comment 3 Katrin Fischer 2018-06-19 19:38:31 UTC
I was hoping to help narrow it down with the version comment - but not sure what setup we are using :(
Comment 4 Martin Renvoize 2018-06-21 10:04:59 UTC

*** This bug has been marked as a duplicate of bug 20879 ***