NeosIT / active-directory-integration2

WordPress plug-in "Next Active Directory Integration"
https://https://wordpress.org/plugins/next-active-directory-integration/
GNU General Public License v3.0
54 stars 25 forks source link

Changing WordPress' AUTH_SALT leads to users not being able to login #173

Closed schakko closed 1 year ago

schakko commented 1 year ago

If the WordPress administrator has changed the AUTH_SALT in wp-config.php, users will no longer be able to log in.

To be able to change the AUTH_SALT but use the old salt for NADI, a new constant NEXT_ACTIVE_DIRECTORY_INTEGRATION_ENCRYPTION_KEY can be configured in wp-config.php.

Before changing the AUTH_SALT:

<?php
// wp-config.php
/**
 * The base configuration for WordPress
 */

// ...
define('AUTH_SALT', 'my_old_auth_salt');

After changing the AUTH_SALT:

<?php
// wp-config.php
/**
 * The base configuration for WordPress
 */

// ...
define('AUTH_SALT', 'my_new_auth_salt');
define('NEXT_ACTIVE_DIRECTORY_INTEGRATION_ENCRYPTION_KEY', 'my_old_auth_salt');
schakko commented 1 year ago

Both fixes solved the issue.