[bug] LDAP authentication: cannot move account #807

New issue

Open

opened 2024-06-17 20:28:37 +00:00 by nullobsi · 0 comments

nullobsi commented

2024-06-17 20:28:37 +00:00

Contributor

Your setup

From source

Extra details

Gentoo Linux

Version

v3.13.2, origin/stable

PostgreSQL version

16.3

What were you trying to do?

When trying to move your account, it asks for the account password. Unfortunately Utils.confirm_current_password exclusively checks the password hash in the DB which doesn't work for LDAP accounts, so the user will always receive an "Invalid password" (unless they use the password that matches the hash in the DB)

What did you expect to happen?

User should be able to use their LDAP password to move their account.

What actually happened?

LDAP password is invalid for moving account.

Logs

No response

Severity

I cannot use it as easily as I'd like

Have you searched for this issue?

I have double-checked and have not found this issue mentioned anywhere.

### Your setup From source ### Extra details Gentoo Linux ### Version v3.13.2, origin/stable ### PostgreSQL version 16.3 ### What were you trying to do? When trying to move your account, it asks for the account password. Unfortunately Utils.confirm_current_password exclusively checks the password hash in the DB which doesn't work for LDAP accounts, so the user will always receive an "Invalid password" (unless they use the password that matches the hash in the DB) ### What did you expect to happen? User should be able to use their LDAP password to move their account. ### What actually happened? LDAP password is invalid for moving account. ### Logs _No response_ ### Severity I cannot use it as easily as I'd like ### Have you searched for this issue? - [x] I have double-checked and have not found this issue mentioned anywhere.

nullobsi added the

bug

label 2024-06-17 20:28:37 +00:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: AkkomaGang/akkoma#807

No description provided.