For Bug Reports
- BookStack Version v0.18.5
- PHP Version: 7.0.22-0
- MySQL Version: 14.14
Expected Behavior
To have the ability to change user's External Authentication ID from distinguishedName to objectGUID when using LDAP authentication with Microsoft AD.
Current Behavior
Currently when a user is moved to a different OU in AD their distinguishedName will change and BookStack will throw this error when that user tries to log in A user with the email user@domain.com already exists but with different credentials.. The fix is to repoint the user's External Authentication ID from the old distinguishedName to the new one.
If objectGUID was used instead this issue wouldn't occur as the user's objectGUID doesn't change when moving OUs or renaming the account etc.
Steps to Reproduce
Register a user in BookStack using LDAP authentication - note the user's External Authentication ID is their distinguishedName in AD. Move the user to a different OU in AD - their distinguishedName will have changed so they can no longer sign in to BookStack. When they try to sign in they get the following error; A user with the email user@domain.com already exists but with different credentials.. The fix is to repoint the user's External Authentication ID from the old distinguishedName to the new one.
For Bug Reports
Expected Behavior
To have the ability to change user's External Authentication ID from distinguishedName to objectGUID when using LDAP authentication with Microsoft AD.
Current Behavior
Currently when a user is moved to a different OU in AD their distinguishedName will change and BookStack will throw this error when that user tries to log in
A user with the email user@domain.com already exists but with different credentials.. The fix is to repoint the user's External Authentication ID from the old distinguishedName to the new one.If objectGUID was used instead this issue wouldn't occur as the user's objectGUID doesn't change when moving OUs or renaming the account etc.
Steps to Reproduce
Register a user in BookStack using LDAP authentication - note the user's External Authentication ID is their distinguishedName in AD. Move the user to a different OU in AD - their distinguishedName will have changed so they can no longer sign in to BookStack. When they try to sign in they get the following error;
A user with the email user@domain.com already exists but with different credentials.. The fix is to repoint the user's External Authentication ID from the old distinguishedName to the new one.