LDAP user authentication works for any random password including the original password

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: No Longer Reproducible
• Affects Version/s: 6.0.6 GA
• Fix Version/s: 6.1.1 CE GA2, 6.2.0 CE M4
• Component/s: Authentication
• Labels:
  • 6.0.6
• Environment:
  Hide

  liferay-portal-tomcat-6.0.6-20110225 ; ; RedHat Linux 6.1 x64 Linux version 2.6.32-131.0.15.el6.x86_64 ; ; OpenJDK Runtime Environment (IcedTea6 1.9.7) (rhel-1.39.1.9.7.el6-x86_64) ; OpenJDK 64-Bit Server VM (build 19.0-b09, mixed mode) ;

  Show

  liferay-portal-tomcat-6.0.6-20110225 RedHat Linux 6.1 x64 Linux version 2.6.32-131.0.15.el6.x86_64 OpenJDK Runtime Environment (IcedTea6 1.9.7) (rhel-1.39.1.9.7.el6-x86_64) OpenJDK 64-Bit Server VM (build 19.0-b09, mixed mode)
• Similar Issues: Show 4 results ; ;

  LPS-27407	Default text password imported through LDAP allows users to sign in with any password
  LPS-4608	Export user password in LDAP when user is created
  LPS-3624	LDAP Passwords are not syncing with LDAP users in LR
  LPS-4731	Special characters not accepted for password in liferay

I am using MySQL database and the users have been imported successfully. I have ldap.import.user.password.enabled=true in portal-ext.properties. But the AD users are able to login for any random password. I posted on community forum but nobody replied. I think it's a bug.

[Mika Koivisto]

This has already been resolved.