"0 authorization consumers configured" shown when profile applies no authorization

Created on 11 July 2022, over 2 years ago
Updated 15 March 2024, 8 months ago

Problem/Motivation

When a valid profile applies no authorizations,
- ldap_authentication shows warning to end-user: "The site logon is currently not working due to a configuration error. Please see logs for additional details.".
- logs show "LDAP Authentication is configured to deny users without LDAP Authorization mappings, but 0 LDAP Authorization consumers are configured.".

Steps to reproduce

- configure LDAP authentication with "Deny access to users without LDAP Authorization Module authorization mappings such as Drupal role"
- configure a valid LDAP authorization profile (ex: allowing specific LDAP groups only)
- login as a valid LDAP user, whose account won't match the authorization profile

Proposed resolution

In the Drupal\ldap_authentication\Controller\LoginValidatorBase::checkAllowedExcluded, distinguish between a valid profile and a profile that did return no authorization

Remaining tasks

- Review proposed approach in attached patch

User interface changes

-

API changes

-

Data model changes

-

🐛 Bug report
Status

Needs review

Version

4.3

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • 🇩🇪Germany tgauges

    I had the same problem on one of my sites and applying the patch fixed the problem.
    Changing the status to "Needs Review" for one or more additional reviews.

  • First commit to issue fork.
Production build 0.71.5 2024