Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-29703

Legacy LDAP users cause error message on login

    Details

    • Type: Bug Bug
    • Status: Documentation Review done
    • Priority: High High
    • Resolution: Unresolved
    • Affects Version/s: 2018.06
    • Fix Version/s: None
    • Labels:
      None

      Description

      Users created by the LDAP login handler have password_hash_type = 0 and password_hash is empty string. On login the standard login handler runs first. It currently doesn't recognise these users and logs an error:
      Password hash type ID '0' is not recognized. Defaulting to eZUser::DEFAULT_PASSWORD_HASH.

      We should accept this case without errors.

      Steps to reproduce:

      • Set up the LDAP login handler after the standard login handler
      • Or (simpler), set up the Textfile login handler after the standard login handler
      • Or (simplest), manually edit the ezuser table for a regular user and set password_hash_type = 0 and password_hash to empty string. Login won't work for this user, before or after the fix, but that's ok.
      • Log in as an LDAP / textfile / manually hacked user
      • Check the error.log for the message mentioned above. Expected after fix: No error message in the log.
      • Manually edit another user, set password_hash_type = 42
      • Log in as this user. Expected before and after fix: Login will fail, and the error message above will show in the log.

        Activity

        Show
        Gunnstein Lye added a comment - PR: https://github.com/ezsystems/ezpublish-legacy/pull/1394
        Hide
        Gunnstein Lye added a comment -

        QA, please test the PR.

        Show
        Gunnstein Lye added a comment - QA, please test the PR.

          People

          • Assignee:
            Unassigned
            Reporter:
            Gunnstein Lye
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:

              Time Tracking

              Estimated:
              Original Estimate - Not Specified
              Not Specified
              Remaining:
              Remaining Estimate - 0 minutes
              0m
              Logged:
              Time Spent - 7 hours, 45 minutes
              7h 45m