WordPress.org

1. killermonkey
   Member
   Posted 1 year ago #

   Our multiuser site is allowing LDAP authentication without a password at all. As long as you are using a valid username on our LDAP server, you're good to go. We have other LDAP authenticated resources that are not behaving this way, but that also could be because they're coded to require a password. So, it's still possible that our LDAP server is coming back with a false positive. I'm not saying WordPress is to blame here, especially since I haven't found anybody else with the same problem.

   I need to quickly address the issue and I was thinking that the quickest fix for me would be to require a password be entered into the WordPress login form. Currently the form does not require a password. How can I easily require a password be entered into the login form?

   Thank you.

2. Ipstenu
   Half-Elf Support Rogue & Mod
   Posted 1 year ago #

   By default WP does require that, so whatever plugin you're using is doing that.

   What LDAP plugin? Please link to it (and tag the post!)

3. killermonkey
   Member
   Posted 1 year ago #

   Thanks, I moved to a different plugin and we're good now.

   Must have been a compatibility issue.

Topic Closed

This topic has been closed to new replies.