Files
pgadmin4/web/pgadmin/authenticate
Ashesh Vashi 2fc4b1f3d4 Fix logins and user management when an account shares its username or email with one from another source. #10675
- Webserver login and auto-creation looked the account up by username
  alone. An internal account with the same username was found first, so
  the Webserver user was refused, or never created.
- LDAP auto-creation, when LDAP_DN_CASE_SENSITIVE is off, compared the
  stored username with the lower-cased login name, so an LDAP user whose
  username has capitals was not found after their first login, and the
  attempt to create them again failed, so they could not log in. It now
  compares both lower-cased.
- setup.py update-user and update-external-user failed with a KeyError
  unless --role or --admin was given, so an account could not be
  deactivated on its own, as the LDAP documentation describes.

A test also checks that a password reset requested with the email in
another case is sent for the internal account.
2026-10-25 16:10:08 +05:30
..
2026-01-05 13:33:45 +05:30