What about the LDAP on/off switch?

[matthias-ronge]

There is a switch to enable or disable LDAP authentication. The switch is at the bottom of the list of LDAP groups, and there is a comment in the HTML code that recommends finding a better place for it. The switch is not permanent, after a restart of Tomcat the status is forgotten and the configuration entry from the configuration file is adopted. Anyone who has never worked with it should know that it is a good thing to have this switch outside of the web application in the configuration file, otherwise you could lock everyone (including yourself) out of the system forever when something doesn't fit while setting up authentication.

Suggestion: It makes sense to have this switch on the LDAP server page read-only. If you click on it, you may see a message that the change can only be made in the configuration file.