When using LDAP (or cas or shiboleth), if the login fails using that method, the system doesn't check the internal user/pw anymore. It just fails the login.
Created attachment 65091 [details] [review] Bug 18953 - Failure on alternate methods of login prevents validating values in DB Normally, when failing to log using LDAP (because the user doesn't exist there, for example), the system will then check the credentials directly in the database. Recent changes in the code prevent that: a failure in LDAP will prevent internal credentials to be checked. This would also happen using CAS or Shibboleth. TO reproduce, you need to enable any of the method above, then try to connect using credentials that should succeed based on the info in your borrowers DB table but fail with the given method. Then apply the patch and try again.
Hi, The patch won't apply. Looks like it needs a rebase as some other code has been added to Auth.pm in the meantime. If you can do that I can sign it off as we have a set-up just like this with LDAP running. Thanks
Is this a duplicate of bug 18880?
You're absolutely correct, it is a duplicate. Well spotted!
*** This bug has been marked as a duplicate of bug 18880 ***