splitbrain/dokuwiki — pull request #495 by acquireflyingjohns (2014-01-06 20:30:15+00:00)
Title: Added code to functions getUserData and checkPass which will fail the au...

...thentication if the bound user is not a member of the group specified by the groupfilter.

We noticed that valid LDAP users could authenticate even if they weren't a member of the group specified by the groupfilter in local.php. The presence of valid 'grouptree' and 'groupfilter' configs in local.php would have no bearing on the login if the user's password is accepted.

It's possible that we have a misconfiguration in dokuwiki that is causing this behavior, but I couldn't determine from the authldap documentation that this was the case. I also could not see in authldap's auth.php where the login is denied based on membership in the groupfilter's group.

I hope this helps. Let me know if you have any questions.