Support » Plugin: Next Active Directory Integration » Authorization groups not working

  • When using the “Authorization Groups” options in the “Permissions” tab, all users under the base DN are still able to login. This behavior wasn’t observed until the last update.

Viewing 11 replies - 1 through 11 (of 11 total)
  • I was testing this also. I thought there was a syntax for the group name to be used, but I think it is just the samaccountname for the group.

    It is partially working, although not in a useful state. If you use the “Test Authentication” option in the admin panel and use a name of a user that is not authorized, the test fails authentication (expected result). However if you use the same credentials on the website, login works (not the desired result).

    Plugin Author schakko

    (@schakko)

    I just want to inform you that we have opened a ticket (ADI-664) in our internal bugtracker to investigate this issue.

    • This reply was modified 1 year, 1 month ago by schakko.
    Plugin Author FatSquirrel

    (@fatsquirrel)

    Hey @shmew22 and @canadabri
    we have just release a new version (2.1.5). This release contains a fix for the authorization group issue you have reported.
    Please update your plugin and check if the issue has been resolved.

    Thank you for letting us know about this issue!

    Testing this now…

    sorry – had to do multiple edits of my results…
    testing has not shown consistent results.

    As of my last test, when authorize by groups is enabled – previously created users are not able to login (even if they are a member of an authorized group)

    • This reply was modified 1 year, 1 month ago by canadabri.
    • This reply was modified 1 year, 1 month ago by canadabri.
    • This reply was modified 1 year, 1 month ago by canadabri.

    definitely not working properly.

    The test authentication shows success regardless of group membership.

    With authentication by groups enabled, previously created users are no longer able to login. I do notice that viewing the Users in the admin panel, users lose the NADI user symbol.

    The basic functions of the plugin do work, but if you are still wanting to allow authentication by NT groups, that part is still not working yet.

    Seems to be working properly here now. I’ve tested with existing users, new users that are a member of my authorized group and users that aren’t a member of my authorized group. I’m using the WordPress update function and not manually updating, so maybe that is where your issue is coming from.

    Plugin Author schakko

    (@schakko)

    @canadabri
    Can you provide an anonymized debug.log? Without this we are not able reproduce your issue.

    I have a log file. can you message me an email to send to pls.

    I noticed your ‘me at …’ address… I sent there if that is ok.

    • This reply was modified 1 year, 1 month ago by canadabri.
    Plugin Author FatSquirrel

    (@fatsquirrel)

    Hey @canadabri
    I´m looking into the issue you have reported and my colleague has send me your log file.

    First off, the test-authentication does have a bug preventing the authorization groups from being registered correctly. This means all users will be authenticated even if the authorization groups should prevent him from doing so. This only happens during the test-authentication and we have already implemented a fix (internal issue tracker #ADI-665). This fix will be released in the upcoming 2.1.6 update.

    I´ll be checking your logs and try to replicate the issue.

    @fatsquirrel, @schakko

    ok – let me know if you want me to do any version testing. my dev environment is ready to go. your colleague has my email addr if there is anything you want to test that is not yet officially released.

    • This reply was modified 1 year, 1 month ago by canadabri.

    I have Version 2.1.7 of the NADI plugin and can replicate @canadabri’s claim:

    If you use the “Test Authentication” option in the admin panel and use a name of a user that is not authorized, the test fails authentication (expected result).

    However if you use the same credentials on the website, login works (not the desired result).

    It doesn’t matter which limiting “Authorize by group membership” “Authorization groups” I add. I have users that can still log in on the front end regardless.

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘Authorization groups not working’ is closed to new replies.