Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Domain Login overrides LDAP login #70

Closed
netprince17 opened this issue Aug 23, 2017 · 7 comments
Closed

Domain Login overrides LDAP login #70

netprince17 opened this issue Aug 23, 2017 · 7 comments

Comments

@netprince17
Copy link

Thanks for your work with pgina fork...

I am trying to setup a computer lab on a university campus. The computer lab will use the LDAP plugin to authenticate students against the university servers... (this works)

I also have the computers on our local active directory, so I can push configuration changes centrally...

The problem is that users in the active directory cant sign into the computers via LDAP. It seems if the user has an account in our active directory, pgina fork will not check the LDAP credentials, even if the active directory credentials fail...

Is there a way to prevent pgina from trying to authenticate the user against our active directory? Ideally I would only authenticate local accounts (for admin access) and LDAP users...

Thanks!
@MutonUfoAI
Copy link
Owner

use
.\username

@netprince17
Copy link
Author

Yes that works... but my user base is pretty non-technical, so it will also cause a lot of problems. Nobody thinks to type .\ before their username, and even if I post signs and details, only half of my users will read them...

@MutonUfoAI
Copy link
Owner

I can possible add another setting to reverse this behavior.
On Friday i'll take a look into it....

@netprince17
Copy link
Author

That would be great... thanks.

MutonUfoAI added a commit that referenced this issue Aug 25, 2017
@MutonUfoAI
pGina core add property PreferLocalAuthentication
ee3858f 
- #70
  If a system is a domain member pgina will authenticate users by def. against the domain
  To invert this behavior an admin can set PreferLocalAuthentication (if .\username is not convenient).
  pGina will than authenicate against the local machine (a pGina authentication is always local)
  To authenticate against the domain a user than needs to pass the domainname, like
  domain\user or user@domain.local
@MutonUfoAI
Copy link
Owner

https://github.com/MutonUfoAI/pgina/releases

@netprince17
Copy link
Author

thanks! I will give it a try.

@netprince17
Copy link
Author

The new option works perfectly for us, thanks!

@MutonUfoAI MutonUfoAI mentioned this issue Dec 21, 2017
Closed
@MutonUfoAI MutonUfoAI mentioned this issue Oct 29, 2018
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@MutonUfoAI @netprince17