View Issue Details

Jump to NotesJump to History
This bug affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
08994Bug reportsAuthenticationpublic2014-04-23 20:192016-05-12 10:38
Reportersykano Assigned Tomdekker  
PrioritynormalSeverityminor 
Status closedResolutionfixed 
Product Version2.05+ 
Summary08994: auth webserver autocreate not working
Description

I try to get webserver authentication with autocreate to work because normal LDAP authentication doesn't support autocreate yet (seems to be disabled in the code).

The webserver authentication without autocreate seems to work.

When I enable "auth_webserver_autocreate_user" in config.php and log in with a user that currently has no limesurvey account I get an redirection error (cyclic redirect) and login is blocked for 10 minutes (for all users even admin -> weird) due to too many incorrect login attempts.

I can't find related error messages in the webserver logs even with debug=1. Limesurvey doesn't seem to have own logs.

Steps To Reproduce
  • configure webserver authentication (in my case apache 2.2.15 with mod_authz_ldap) for limesurvey/admin
  • enable webserver authentication plugin and configure (I had to set the key of the login name to "PHP_AUTH_USER".)
  • set "auth_webserver" and "auth_webserver_autocreate_user" to true in application/config/config.php
  • goto limesurvey/admin and login with LDAP user that has no limesurvey account
TagsNo tags attached.
Bug heat6
Complete LimeSurvey version number (& build)140404
I will donate to the project if issue is resolvedNo
BrowserFirefox and others
Database type & versionmysql 5.1.73
Server OS (if known)Linux (CentOS 6.5)
Webserver software & version (if known)apache 2.2.15
PHP Version5.3.3

Users monitoring this issue

There are no users monitoring this issue.

Activities

sykano

sykano

2014-06-03 19:15

reporter   ~30046

Ok, with Build 20140520 it seems to work now. Maybe I just made a mistake in config.php, I'm not sure. Problem is config.php has a different format than config-defaults.php although the comments there suggest otherwise.

The ugly redirect loop should be fixed somehow. It would at least happen if you have Webserver Auth activated but Autocreate disabled and login with an username that has no account in Limesurvey.
LouisGac

LouisGac

2016-05-11 14:32

developer   ~38341

reported as resolved by reporter
c_schmitz

c_schmitz

2016-05-12 10:38

administrator   ~38427

Version 2.50 Build 160512 released

Issue History

Date Modified Username Field Change
2014-04-23 20:19 sykano New Issue
2014-04-23 23:40 mfaber Issue Monitored: mfaber
2014-04-23 23:41 c_schmitz Assigned To => mdekker
2014-04-23 23:41 c_schmitz Status new => assigned
2014-06-03 19:15 sykano Note Added: 30046
2014-06-30 15:00 mfaber Issue End Monitor: mfaber
2016-05-11 14:32 LouisGac Note Added: 38341
2016-05-11 14:32 LouisGac Status assigned => resolved
2016-05-11 14:32 LouisGac Resolution open => fixed
2016-05-12 10:38 c_schmitz Note Added: 38427
2016-05-12 10:38 c_schmitz Status resolved => closed