Active Directory Authenticates without proper password

[majohnst]

I have setup portal 2.6.2 to use Active Directory according to the wiki instructions. The authentication works fine. But I found a minor bug. If I type in a valid username and no password, the user is logged in and the roles are populated for that user. When I try a valid username and an incorrect password, the login fails as it should.

Is there a way to stop the login when no password is present?

[swisst]

Yes, upgrade to 2.6.3. This was an identified bug and fixed in the 2.6.3 release.

[majohnst]

Is there an easy way to upgrade from 2.6.2 to 2.6.3 so that all the LDAP configurations and layout changes aren't over written?

[swisst]

If you are tracking your changes it should be pretty easy. To be on the safe side, whenever we upgrade to a new version here's the process we follow:

1) Download the latest and unzip to a new location.
2) Use a file comparing tool (like Beyond Compare : http://www.scootersoftware.com/ I'm not sure why this isn't part of the OS!) to see what has changed.
3) We'll fold our changes into the new files, which might have changes in them from the new release.

[majohnst]

thanks