Ldap group authentication not working

[symourjr]

Good Afternoon,

We were able to have syspass connect to ldap. However have an issue wherein even though a user is not part of the syspass-users group for example, they still were able to login.

Also I was wondering why an account logins in the first time, it tells them their accounts are disabled. On the logs it says an activation email was sent to the user however there wasn't any activation link.

@mdrozeski @wboone

[nuxsmin]

Hi,

I suppose that you are running 1.0 version, aren't you?. Ldap group membership should work right, let me do some reviews to the code and let you know.

About Ldap users first login disabled, this behavior is due to the application creates the user account in first login, so it doesn't know in what group users should belong . In next release you will be able to configure a default group for Ldap users.

Kind regards

[symourjr]

Using 1.1b.

[nuxsmin]

Hi,

I've been doing some code review and tests, and the ldap group is checked rightly, the only reason that it would allow access is when the LDAP server is not reachable, then the application falls back to the MySQL backend, where the user credentials are saved. Can it be the scenario?