ejabberd - Comments for "LDAP authentication bug: incorrect blank passwords handling."

It's not OpenLDAP

kami77 — Tue, 30 Jan 2007 13:49:33 +0000

The matter concerns not OpenLDAP but Microsoft Active Directory. May be it's the root of problem.

uvizhe — Mon, 29 Jan 2007 06:56:24 +0000

I have the same problem with authorization against AD. Blank passwords are always accepted. Is this a bug of Ejabberd or AD?

xram@jabber.ru — Sat, 27 Jan 2007 05:46:06 +0000

I don't see any problem with blank passwords with OpenLDAP:

(ejabberd@localhost)4> ejabberd_auth_ldap:check_password("test", "mydomain", "").
false

Check the configuration of your LDAP server.