Skip to content

Support fallback to LDAP password with i_use_mode_kerberos

Currently, when i_use_mode_kerberos is enabled in the LDAP driver, Davical checks the REMOTE_USER server variable, followed by the REDIRECT_REMOTE_USER variable, for a matching username. If a matching username is not found, authentication fails immediately.

This feature modifies the LDAP driver to fallback to standard LDAP password authentication when i_use_mode_kerberos is set to allow_fallback_to_ldap_auth andneither of these server variables are set. This allows non-kerberos-enabled clients to authenticate as well.

Fixes #323 (closed)

Merge request reports