When the ldap is activated and well configured :
if the username does not exist in the ldap database and the the password is not filled, the connection is allowed by askbot
if the username exists and no password is filled, the connection is also allowed.
if the username exists and the password is filled and wrong, then the connection is refused (ldap error : invalid credentials
if the username exists and the password is well filled, the the connection is accepted.
It seems to be that ldap-python simple_bind_s method does not raised an exception included in ldap.LDAPError for the first two cases. I have just added a trace to confirm that in the fourth cases the method is called. The ldap-python doc does not give more details. I will try to investigate further next week. If you have any idea, let me know, I have a full test environment to investigate.
Create your Q&A site at askbot.com. Managed Askbot hosting at just $15/mo. Dedicated hosting, support contracts, consulting services.
create your Q&A siteAsked: 2011-05-26 07:25:10 -0500
Seen: 109 times
Last updated: May 31 '11
Exception with ldap signin when the password includes accented characters
Internal Server Error when trying to edit personal pro
Where are the badges in a fresh install? [fixed]
HTML Tags in titles getting eaten <fixed/>
Unknown column 'auth_user.is_approved' in 'field list' [fixed]
email for comments: link missing a href [fixed]
Bug: Horizontal Rule in Comment breaks stylesheet [fixed]
"Related questions" section shows deleted questions?
error on upvote: "Sorry, something is not right here..." [fixed]
Copyright Askbot, 2010-2011. Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.