Skip to content

Wrong log entry when LDAP user enters wrong password #34942

Open
@urz-hgw

Description

@urz-hgw

Description

Hi,

while debugging other issues I noticed that the log message differs between LDAP users and local users in case of a wrong password.

gitea-1    | 2025/07/03 11:53:08 routers/web/auth/auth.go:222:SignInPost() [W] Failed authentication attempt for LDAPUSER from 10.128.1.1:60904: user does not exist [uid: 0, name: LDAPUSER]
gitea-1    | 2025/07/03 11:53:22 routers/web/auth/auth.go:222:SignInPost() [W] Failed authentication attempt for LOCALUSER from 10.128.1.1:60904: user's password is invalid [uid: 1, name: LOCALUSER]

This is a bit confusing since the LDAPUSER does exist in gitea and the ldap return value for invalid credentials should be detectable to write the same error message for ldap users.

Best regards
Daniel

Gitea Version

1.24.2

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

1.24.2

Operating System

Debian

How are you running Gitea?

Docker default image

Database

MySQL/MariaDB

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions