[web2py] Re: Automatic login if username contains @ : Is this normal ?

2012-11-23 Thread demetrio
I made some progress on this issue. If ldap_mode is set to None, it always access and creates the user. Then I set ldap_mode to 'uid' and the @ issue doesn't happen more. But there is a little bug in exception handling in the ldap login method, because if the user exists but the password is

[web2py] Re: Automatic login if username contains @ : Is this normal ?

2012-11-22 Thread demetrio
I have the same issue using web2py 1.99.7. I'm trying to connecto to an OpenDS LDAP, and if I use any non-existing user with @ enters automatically. Is this resolved in a newer release? If I can send some debug info just tell me. El jueves, 8 de noviembre de 2012 16:26:57 UTC+1, Massimo Di

[web2py] Re: Automatic login if username contains @ : Is this normal ?

2012-11-22 Thread Massimo Di Pierro
I believe this is a bug in Python-ldap not a bug in web2py. This is a serious bug. 1) We have two options: block all usernames containing a @ (but what if the username is legitimate?) 2) Fix it in ldap. In case 2) it would help if somebody could reproduce the problem in a simple python ldap

[web2py] Re: Automatic login if username contains @ : Is this normal ?

2012-11-08 Thread Massimo Di Pierro
I emailed you privately abou this. Asking for for somd debug info. Did you get my email? --

[web2py] Re: Automatic login if username contains @ : Is this normal ?

2012-11-07 Thread apinho
Hi, Did you have the time to check it up ? On Tuesday, November 6, 2012 1:40:39 PM UTC, Massimo Di Pierro wrote: This is not normal and it is scary. It could be a ldap issue of a ldap_login issue. I will check it asap today. Massimo On Tuesday, 6 November 2012 05:24:26 UTC-6, apinho

[web2py] Re: Automatic login if username contains @ : Is this normal ?

2012-11-06 Thread Massimo Di Pierro
This is not normal and it is scary. It could be a ldap issue of a ldap_login issue. I will check it asap today. Massimo On Tuesday, 6 November 2012 05:24:26 UTC-6, apinho wrote: Hi, I'm working on a site, for my company. I want to give only access to accounts : - listed in my ldap