This code seems to prevent the user from authenticating against drupal when crowd fails unless the ldapauth module is installed.

    // Crowd Authentication failed
    if(CROWD_USELDAP) {
      /**
       * The LDAPAUTH_LOGIN_PROCESS variable will match one of the following (string) values:
       *   - 0 :: This means that ldapauth is configured in mixed mode; LDAP authentication is performed only if Drupal authentication fails
       *   - 1 :: This means that ldapauth is configured to use the LDAP directory only 
       */
      if(LDAPAUTH_LOGIN_PROCESS === "0") {
        // If we are in mixed mode, attempt to authenticate in Drupal
        $crowd_auth = FALSE;
        user_authenticate($form_state['values']);
      }

CommentFileSizeAuthor
#1 crowd_failover.patch2.18 KBben.bunk

Comments

ben.bunk’s picture

StatusFileSize
new2.18 KB

Turns out the exception is handled further up in the stack. Added the logic into the try block. Also added a *checkbox* in the settings.

ebeyrent’s picture

Assigned: Unassigned » ebeyrent
ben.bunk’s picture

Has anyone been able to look at this patch? If the patch doesn't work I can roll a new one.

rjacobs’s picture

Assigned: ebeyrent » Unassigned
Status: Active » Needs review

hummmm, this is quite old now (more than 2 years). I'm not using the 6.x-1.x branch so I can't really test this, but if someone can confirm it's RTBC I could commit it (given that it's marked as critical). If I don't hear back on this soon I may close it either way in order to clean-up the queues a bit.

rjacobs’s picture

Status: Needs review » Closed (won't fix)

I'm going to close this now due to inactivity. Note also that there is now a 6.x-2.0-beta release that does not have this issue.