DNNCommunity / DNN.ActiveDirectory

Active Directory authentication for DNN
MIT License
26 stars 22 forks source link

Can login without password :-( #51

Open FROCHE38 opened 5 years ago

FROCHE38 commented 5 years ago

Describe the bug

Can login without password :-(

Software Versions

To Reproduce

Steps to reproduce the behavior:

  1. Open the login page
  2. Enter a valid domain username and leave the password blank
  3. Click on "Login"
  4. You are login.

Expected behavior

If a bad password is given, the module works correctly

sawest commented 5 years ago

I cannot reproduce this behavior by following the steps listed. There appears to be more to the story than these 4 steps. Please provide more information such as your exact environment and configuration settings.

FROCHE38 commented 5 years ago

Hello, This week-end i will remove completely the authentification module from my intranet site and install it again to be sure. Have you a documentation how to configure IIS and DNN Active.Directory module to be sure having the good settings?

sawest commented 5 years ago

You can reference the Wiki here on github. It has the steps to configure it correctly.

FROCHE38 commented 5 years ago

Hello, I have uninstall the module, remove manually all the old entries "AD_xxxx" in the PortalSettings table. Then install again and setup as the wiki said. I use Chrome or Firefox, open the login page : enter only username without password and click on the login button > I am logged with success :-( 2018-09-14_18h45_27 The module 2018-09-14_18h49_00 Nota: I check "Auto-login", click on "Update module settings". Then when I open the settings again "Auto-login" is always unchecked I use IIS on windows 2012R2 (x64) Any idea of the problem? Do you need more details? settings