Bug 20943 - Cannot enable shibboleth and LDAP at the same time
Summary: Cannot enable shibboleth and LDAP at the same time
Status: RESOLVED DUPLICATE of bug 20879
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal (vote)
Assignee: Nick Clemens (kidclamp)
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-06-14 13:57 UTC by Nick Clemens (kidclamp)
Modified: 2018-06-21 10:04 UTC (History)
4 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nick Clemens (kidclamp) 2018-06-14 13:57:21 UTC
In C4::Auth->checkpw the authentication methods are in an elsif loop. When both methods are enabled the ldap loop catches the login, fails because it doesn't have the correct information, and a shibboleth login is not passed through.
Comment 1 Katrin Fischer 2018-06-18 18:28:33 UTC
Interesting. Has that changed in recent versions? We have a library using Shibboleth and LDAP with 16.11
Comment 2 Nick Clemens (kidclamp) 2018-06-19 15:51:33 UTC
(In reply to Katrin Fischer from comment #1)
> Interesting. Has that changed in recent versions? We have a library using
> Shibboleth and LDAP with 16.11

It may be specific to the LDAP setup with 'auth_by_bind' activated - I think we are seeing the connection refused so login failed as we don't have good user/pass info for auth_by_bind
Comment 3 Katrin Fischer 2018-06-19 19:38:31 UTC
I was hoping to help narrow it down with the version comment - but not sure what setup we are using :(
Comment 4 Martin Renvoize 2018-06-21 10:04:59 UTC

*** This bug has been marked as a duplicate of bug 20879 ***