Liferay authentication fails for screen name authentication when "mail" attribute is not set in LDAP (AD)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: No Longer Reproducible
• Affects Version/s: 6.1.10 EE GA1
• Fix Version/s: 6.2.0 CE M4
• Component/s: Authentication, Util, Util > Login portlet
• Labels:
  • community-verifier
• Environment: Linux 2.6.32-300.7.1.el5uek x86_64 ; LDAP (AD)
• Similar Issues: Show 4 results ; ;

  LPS-4402	Liferay ldap should authenticate a user by more field not only screen name
  LPS-11426	LDAP Authentication Issues
  LPS-27747	When switching types of LDAP authentication, user data from LDAP is not successfully transferred to and/or reflected correctly in Liferay Portal
  LPS-4605	When a user is locked out of LDAP it's not throwing the you are locked out error message just authentication failed on the login form

Context:
1) A valid user in Active Directory exists
2) The "mail" entry is missing in the Active Directory for the user
3) The authentication is set by Screen Name

When tries to login, the authentication fails. This issue is not occurring in other applications using Active Directory

LDAP configuration used is attached..

[Alex Weirig]

Hello,

that's because the email is defined as a required field for the LDAP record.

In your portal-ext.properties you can set the email as optional field. Simply set the following to false.
#

1. Set this to false if you want to be able to create users without an email
2. address. An email address will be automatically assigned to a user based
3. on the property "users.email.address.auto.suffix".
   #
   users.email.address.required=true

That should do the trick.

HTH

Alex

[Amit Doshi]

Sanalkumar Parameswaran, Please discuss this in liferay community forum and also refer the above comment of Alex.

It can't be considered as an issue. So,This issue will be closed.