KB Article #180773

Login regardless the password with LDAP user

Problem

It is possible to login with any password (1, abc... which are wrong) to any product using Passport AM with my LDAP user
Note: it is the same for Passport UI.

Resolution

Edit your LDAP configuration in Passport: Adminstration > Identity Store

Section 3. Authentication, make sure your authentication mode is NOT set to none.

Set it to simple.


None is for anonymous authentication. The user credentials are not used for authentication (it is detailed in the Passport admin guide).