Skip to content

[IMPROVE] Allow login of non LDAP users when LDAP is enabled#16949

Merged
rodrigok merged 2 commits intodevelopfrom
ldap-improvements
Mar 20, 2020
Merged

[IMPROVE] Allow login of non LDAP users when LDAP is enabled#16949
rodrigok merged 2 commits intodevelopfrom
ldap-improvements

Conversation

@rodrigok
Copy link
Member

With this change, the LDAP Login Fallback isn't necessary anymore to allow system users to login (usual for admin accounts that were created before the LDAP sync). So now the LDAP Fallback is disabled by default meaning that the users' passwords will not be saved in rocket.chat by default anymore.

Closes #6144

@rodrigok rodrigok added this to the 3.1.0 milestone Mar 20, 2020
@rodrigok rodrigok requested a review from sampaiodiego March 20, 2020 12:25
@rodrigok rodrigok changed the title [IMPROVE] Allow login of non LDAP users when LDAP is enable [IMPROVE] Allow login of non LDAP users when LDAP is enabled Mar 20, 2020
@rodrigok rodrigok merged commit 0129fb5 into develop Mar 20, 2020
@rodrigok rodrigok deleted the ldap-improvements branch March 20, 2020 18:49
ggazzo added a commit that referenced this pull request Mar 21, 2020
…ultiple-users

* 'develop' of github.com:RocketChat/Rocket.Chat: (35 commits)
  Change license version requested (#16956)
  Synchronize saml roles to local user (#16158)
  Fix: Padding required in the Facebook Messenger option in Livechat (#16202)
  Add some missing ES translations (#16120)
  Adding margin to click to load text (#16210)
  [FIX] Explicitly set text of confirmation button (#16138)
  Redirected to home when a room has been deleted instead of getting broken link(blank page) of deleted room (#16227)
  Fixed translate variable in ArchiveRoom Modal (#16310)
  [FIX] Display user status along with icon (#16875)
  [FIX] users.setStatus and user from params (#16128)
  Update cypress to version 4.0.2 (#16685)
  [FIX] Text formatted to remain within button even on screen resize  (#14136)
  fix(slack-bridge): messages doesn't send to slack after renaming channel (#16565)
  [NEW] Route to get updated roles after a date (#16610)
  [FIX] Removed Reply in DM from livechat rooms (#16957)
  Update presence package (#16786)
  [NEW] Enterprise Edition (#16944)
  Add an index to the name field for omnichannel department (#16953)
  [FIX] Login with LinkedIn not mapping name and picture correctly (#16955)
  [IMPROVE] Allow login of non LDAP users when LDAP is enabled (#16949)
  ...
ggazzo added a commit that referenced this pull request Mar 21, 2020
…ultiple-users

* 'develop' of github.com:RocketChat/Rocket.Chat: (35 commits)
  Change license version requested (#16956)
  Synchronize saml roles to local user (#16158)
  Fix: Padding required in the Facebook Messenger option in Livechat (#16202)
  Add some missing ES translations (#16120)
  Adding margin to click to load text (#16210)
  [FIX] Explicitly set text of confirmation button (#16138)
  Redirected to home when a room has been deleted instead of getting broken link(blank page) of deleted room (#16227)
  Fixed translate variable in ArchiveRoom Modal (#16310)
  [FIX] Display user status along with icon (#16875)
  [FIX] users.setStatus and user from params (#16128)
  Update cypress to version 4.0.2 (#16685)
  [FIX] Text formatted to remain within button even on screen resize  (#14136)
  fix(slack-bridge): messages doesn't send to slack after renaming channel (#16565)
  [NEW] Route to get updated roles after a date (#16610)
  [FIX] Removed Reply in DM from livechat rooms (#16957)
  Update presence package (#16786)
  [NEW] Enterprise Edition (#16944)
  Add an index to the name field for omnichannel department (#16953)
  [FIX] Login with LinkedIn not mapping name and picture correctly (#16955)
  [IMPROVE] Allow login of non LDAP users when LDAP is enabled (#16949)
  ...
ggazzo added a commit that referenced this pull request Mar 21, 2020
…ultiple-users

* 'develop' of github.com:RocketChat/Rocket.Chat: (35 commits)
  Change license version requested (#16956)
  Synchronize saml roles to local user (#16158)
  Fix: Padding required in the Facebook Messenger option in Livechat (#16202)
  Add some missing ES translations (#16120)
  Adding margin to click to load text (#16210)
  [FIX] Explicitly set text of confirmation button (#16138)
  Redirected to home when a room has been deleted instead of getting broken link(blank page) of deleted room (#16227)
  Fixed translate variable in ArchiveRoom Modal (#16310)
  [FIX] Display user status along with icon (#16875)
  [FIX] users.setStatus and user from params (#16128)
  Update cypress to version 4.0.2 (#16685)
  [FIX] Text formatted to remain within button even on screen resize  (#14136)
  fix(slack-bridge): messages doesn't send to slack after renaming channel (#16565)
  [NEW] Route to get updated roles after a date (#16610)
  [FIX] Removed Reply in DM from livechat rooms (#16957)
  Update presence package (#16786)
  [NEW] Enterprise Edition (#16944)
  Add an index to the name field for omnichannel department (#16953)
  [FIX] Login with LinkedIn not mapping name and picture correctly (#16955)
  [IMPROVE] Allow login of non LDAP users when LDAP is enabled (#16949)
  ...
@ankar84
Copy link

ankar84 commented Mar 23, 2020

That is a really good improvement for LDAP enabled environments!
Thanks a lot for that!

@ankar84
Copy link

ankar84 commented Apr 27, 2020

That is a really good improvement for LDAP enabled environments!
Thanks a lot for that!

@rodrigok @pierre-lehnen-rc @sampaiodiego @ggazzo
Good improvement. but we now get error Login Forbidden with KeyCloack OAuth and LDAP Login Fallback disabled
image
After LDAP Login Fallback was set to enabled - KetClock login successful.

@rodrigok
Copy link
Member Author

@ankar84 what Rocket.Chat version are you using?

@ankar84
Copy link

ankar84 commented Apr 27, 2020

@ankar84 what Rocket.Chat version are you using?

Version 3.1.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Question: why is the password for an LDAP enabled account stored in MongoDB?

3 participants

Comments