Logins without entering a password

  • We’ve recently uncovered a problem where our users are able to login to our WP 3.0.1 site by entering in only their username. Entering a username and password works, too, but the first behavior is troublesome. It seems as though it has something to with LDAP being enabled, since the same behavior doesn’t occur when LDAP logins are disabled.

    I’m also seeing an error when anyone goes to wp-login.php — they see ERROR: Wrong username / password combination before even putting in any credentials. I think this is more cosmetic, as I know I’ve come across this in previous searches.

    Any chance this LDAP oddity is behavior that someone has seen before? I tried searching and can’t find anything.

    Thanks,
    Basil

  • The topic ‘Logins without entering a password’ is closed to new replies.