Can login without password :-(

[FROCHE38]

Describe the bug

Can login without password :-(

Software Versions

• DNN: 08.04.00
• Module: 06.01.12

To Reproduce

Steps to reproduce the behavior:

1. Open the login page
2. Enter a valid domain username and leave the password blank
3. Click on "Login"
4. You are login.

Expected behavior

If a bad password is given, the module works correctly

[sawest]

I cannot reproduce this behavior by following the steps listed. There appears to be more to the story than these 4 steps. Please provide more information such as your exact environment and configuration settings.

[FROCHE38]

Hello,
This week-end i will remove completely the authentification module from my intranet site and install it again to be sure. Have you a documentation how to configure IIS and DNN Active.Directory module to be sure having the good settings?

[sawest]

You can reference the Wiki here on github. It has the steps to configure it correctly.

[FROCHE38]

Hello,
I have uninstall the module, remove manually all the old entries "AD_xxxx" in the PortalSettings table.
Then install again and setup as the wiki said.
I use Chrome or Firefox, open the login page : enter only username without password and click on the login button > I am logged with success :-(

The module

Nota: I check "Auto-login", click on "Update module settings". Then when I open the settings again "Auto-login" is always unchecked
I use IIS on windows 2012R2 (x64)
Any idea of the problem?
Do you need more details?
settings