Problem/Motivation

A non-ldap user in an environment using mixed mode wants to reset his password using the Reset your password link on the user edit form.

Debug Report

  1. Create a new user using drush user:create testuser --password=********
  2. Login with the new user
  3. Enter the user edit form → you will see the Reset your password link nearby the password field
  4. Click on the link → Access forbidden

BTW: at the moment every authenticated user gets an Access denied, it is independent of the user's role.

Proposed resolution

Non-ldap user will be able to use the reset form.

Remaining tasks

Update \Drupal\ldap_authentication\Routing\RouteSubscriber::validateResetPasswordAllowed to allow access for a logged-in users who is not an ldap_user.

Data model changes

No

Issue fork ldap-3549930

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

rwam created an issue. See original summary.

rwam opened merge request !112

rwam’s picture

rwam commented
Status: Active » Needs review

I've created a solution which works fine on our end. So would be great to get any feedback if it's suitable.

bluegeek9 made their first commit to this issue’s fork.

bluegeek9 changed the visibility of the branch 8.x-4.x to hidden.

bluegeek9’s picture

bluegeek9 commented
Status: Needs review » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

  • bluegeek9 committed 818e0a27 on 8.x-4.x authored by rwam 
    [#3549930] feat: [LDAP Authentication] Reset password for non ldap-...