From f749ae6052f35ffb1e59aa6f4bfa37ebc986e549 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur <eldy@destailleur.fr> Date: Mon, 28 Apr 2014 02:31:11 +0200 Subject: [PATCH] Fix: With LDAP we refused empty password because some LDAP are "opened" for anonymous access so connexion is a success. --- htdocs/main.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php index 2d0128c7033..e5a69e96fc2 100644 --- a/htdocs/main.inc.php +++ b/htdocs/main.inc.php @@ -481,7 +481,7 @@ if (! defined('NOLOGIN')) } // End test login / passwords - if (! $login) + if (! $login || (in_array('ldap',$authmode) && empty($passwordtotest))) // With LDAP we refused empty password because some LDAP are "opened" for anonymous access so connexion is a success. { // We show login page dol_loginfunction($langs,$conf,(! empty($mysoc)?$mysoc:'')); -- GitLab