User login does not work after changing Authentication Source without BIND password #2669

Open
opened 2025-11-02 04:43:58 -06:00 by GiteaMirror · 4 comments
Owner

Originally created by @joga252 on GitHub (Dec 18, 2018).

  • Gitea version (or commit ref): 1.6.1
  • Git version: 2.20.0 64 bit for Windows
  • Operating system: Windows Server 2016
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL Express
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

After deactivating Enable User Synchronization in Administration area and saving changes without providing the Bind Password for the LDAP connection (see the blue boxes), user login is no more possible. Saving again with provided password re-enables users to login to the website.

Screenshots

image

Originally created by @joga252 on GitHub (Dec 18, 2018). - Gitea version (or commit ref): 1.6.1 - Git version: 2.20.0 64 bit for Windows - Operating system: Windows Server 2016 - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [x] MSSQL Express - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [x] Not relevant - Log gist: ## Description After deactivating *Enable User Synchronization* in Administration area and saving changes without providing the *Bind Password* for the LDAP connection (see the blue boxes), user login is no more possible. Saving again with provided password re-enables users to login to the website. ## Screenshots ![image](https://user-images.githubusercontent.com/1165349/50161085-17173100-02db-11e9-91d3-381f7ee2848f.png)
GiteaMirror added the issue/confirmedtype/bug labels 2025-11-02 04:43:58 -06:00
Author
Owner

@lafriks commented on GitHub (Dec 23, 2018):

Bind password is needed for this auth source to work if your server does not allow anonymous connections

@lafriks commented on GitHub (Dec 23, 2018): Bind password is needed for this auth source to work if your server does not allow anonymous connections
Author
Owner

@c-key commented on GitHub (Dec 28, 2018):

The Problem is that on every change on the site the "Bind Password" must be refilled. If the field is blank and for example the option "Enable User Synchronization" will be deactivated this auth source doesn't work. After refill the password and save the site without any modification the auth source will work as normal.
Is it a security feature that the bind password must be refilled on every change on the site or is this a bug?

@c-key commented on GitHub (Dec 28, 2018): The Problem is that on every change on the site the "Bind Password" must be refilled. If the field is blank and for example the option "Enable User Synchronization" will be deactivated this auth source doesn't work. After refill the password and save the site without any modification the auth source will work as normal. Is it a security feature that the bind password must be refilled on every change on the site or is this a bug?
Author
Owner

@lafriks commented on GitHub (Jan 23, 2019):

yes bind password if it was set should be shown here

@lafriks commented on GitHub (Jan 23, 2019): yes bind password if it was set should be shown here
Author
Owner

@stale[bot] commented on GitHub (Mar 24, 2019):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale[bot] commented on GitHub (Mar 24, 2019): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#2669