Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-29703

Legacy LDAP users cause error message on login

Details

    Description

      Users created by the LDAP login handler have password_hash_type = 0 and password_hash is empty string. On login the standard login handler runs first. It currently doesn't recognise these users and logs an error:
      Password hash type ID '0' is not recognized. Defaulting to eZUser::DEFAULT_PASSWORD_HASH.

      We should accept this case without errors.

      Steps to reproduce:

      • Set up the LDAP login handler after the standard login handler
      • Or (simpler), set up the Textfile login handler after the standard login handler
      • Or (simplest), manually edit the ezuser table for a regular user and set password_hash_type = 0 and password_hash to empty string. Login won't work for this user, before or after the fix, but that's ok.
      • Log in as an LDAP / textfile / manually hacked user
      • Check the error.log for the message mentioned above. Expected after fix: No error message in the log.
      • Manually edit another user, set password_hash_type = 42
      • Log in as this user. Expected before and after fix: Login will fail, and the error message above will show in the log.

      Attachments

        Activity

          People

            Unassigned Unassigned
            gunnstein.lye@ibexa.co Gunnstein Lye
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 7 hours, 45 minutes
                7h 45m