openwebwork / webwork2

Course management front end for WeBWorK
http://webwork.maa.org/wiki/Main_Page
Other
140 stars 164 forks source link

$authen{admin_module} must be a subset of $authen{user_module} #2446

Open somiaj opened 1 week ago

somiaj commented 1 week ago

In my setup here I have the following:

$authen{user_module} = [
        { '*' => 'WeBWorK::Authen::LTIAdvanced' },
        { '*' => 'WeBWorK::Authen::LDAP' },
];
$authen{admin_module} = [
        'WeBWorK::Authen::Basic_TheLastOption'
];

And I was not able to login to my admin course because the admin_module was not a subset of the user_module.

Logic for my setup, WeBWorK::Authen::LDAP, already provides an option to only use basic/local passwords for users that do not exist, but will not use this for users that do, which I had configured. I am the only user who isn't using LDAP, so for the admin course I just setup 2fa with basic login, but cannot use it unless I also add the option to the user_module.

Is there any reason why the admin_module must be a subset of user_module?