Problem/Motivation

When a valid profile applies no authorizations,
- ldap_authentication shows warning to end-user: "The site logon is currently not working due to a configuration error. Please see logs for additional details.".
- logs show "LDAP Authentication is configured to deny users without LDAP Authorization mappings, but 0 LDAP Authorization consumers are configured.".

Steps to reproduce

- configure LDAP authentication with "Deny access to users without LDAP Authorization Module authorization mappings such as Drupal role"
- configure a valid LDAP authorization profile (ex: allowing specific LDAP groups only)
- login as a valid LDAP user, whose account won't match the authorization profile

Proposed resolution

In the Drupal\ldap_authentication\Controller\LoginValidatorBase::checkAllowedExcluded, distinguish between a valid profile and a profile that did return no authorization

Remaining tasks

- Review proposed approach in attached patch

User interface changes

-

API changes

-

Data model changes

-

CommentFileSizeAuthor
valid_profile_warning.patch1.71 KBbkill

Issue fork ldap-3295284

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

bkill created an issue. See original summary.

tgauges’s picture

tgauges
he/him
commented
Status: Active » Needs review

I had the same problem on one of my sites and applying the patch fixed the problem.
Changing the status to "Needs Review" for one or more additional reviews.

bluegeek9 made their first commit to this issue’s fork.