Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authenticated users are not allowed to access admin pages (etherpad 1.8.7 and above) #51

Closed
AyoubHabra opened this issue Oct 8, 2021 · 3 comments

Comments

@AyoubHabra
Copy link

After upgrading etherpad instance from version 1.8.4 to 1.8.7. Ldap users were not allowed to access admin pages despite being successfully authenticated by ep_ldapauth. And, by reverting to the 1.8.4 (or 1.8.5) version with the same settings, it works again. I think it's related to security fixes applied to Etherpad. Can you help me with this issue please?

`
app_1 | [2021-10-08 10:47:52.545] [DEBUG] console - ep_ldapauth.authenticate
app_1 | [2021-10-08 10:47:52.661] [DEBUG] console - ep_ldapauth.authenticate: deferring setting of username [] to CLIENT_READY for express_sid = MrwZLeyqA***********
app_1 | [2021-10-08 10:47:52.662] [DEBUG] console - ep_ldapauth.authenticate: successful authentication
app_1 | [2021-10-08 10:47:52.662] [INFO] http - Successful authentication from IP **** for user *********
app_1 | [2021-10-08 10:47:52.664] [DEBUG] http - 403, GET /admin

`

@tykeal
Copy link
Owner

tykeal commented Oct 8, 2021

Please note: This repository is up for adoption. I no longer have the time to maintain it, nor does my work require it anymore so I have no need to work on it.

@tykeal
Copy link
Owner

tykeal commented Oct 8, 2021

As an FYI PR #47 may be a fix for you. But again, I don't have the time (nor inclination to do the validation or testing)

@AyoubHabra
Copy link
Author

Thank you very much for your reply.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants