444390 - Anonymous LDAP failure reports user/pass not found with MS-AD

Status: NEW

(Bugzilla :: Administration, task)

Description

[Mark]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008052906 Firefox/3.0
Build Identifier: 

Bugzilla does not distinguish between an anonymous bind failure and username/pass failure.

When using Microsoft Active Directory as an LDAP directory for authentication, Active Directory does not allow anonymous binding by default.  However, if LDAP authentication is set up to use an AD backend without "LDAPbinddn" set Bugzilla returns a username/password not found error.  

Ideally, Bugzilla should return another type of error more indicative of the actual problem.

Reproducible: Always

Steps to Reproduce:
1. Use Active Directory LDAP with LDAPbinddn set correctly
2. Login works fine.
3. Use Active Directory LDAP with LDAPbinddn cleared.
4. Username/Password not found error.

Comment 1

[Max Kanat-Alexander]

Agreed, a more helpful message would be good. If you'd like to contribute a patch for it, it would definitely be welcome. :-)