Issue
- We have enabled LDAP authentication, checking it as required and we have unchecked Ignore User Search Filter for Authentication.
- With this configuration applied the administrator users can login even if they do not exist in LDAP.
Environment
- DXP 7.4
Resolution
-
This is the expected behavior using this configuration, administrator users will be able do login by authenticating against the portal.
- A solution could be to disable password checking by the internal portal authentication through the
auth.pipeline.enable.liferay.check
property added in theportal-ext.properties
file.
It is recommended to test this configuration first in non-production environments and evaluate if it fits your use case.
Additional Information