LDAP login not working if local user with same name exists

[tuxmea]

Proposal:

• If LDAP is enabled, only LDAP logins shoud be used.
• Only Admin will remain local user

Maybe remove the possibility to switch (local login, ldap login)?

[oneiros]

LDAP login not working if local user with same name exists

What exactly does "not working" mean?

LDAP is only used for authentication. If the LDAP server says a user is authentic, the database is searched for an existing user with the same email address. If such a user exists, this user is signed in. If no such user exists, a new (regular) user is created in the database.

[tuxmea]

According to customer the login does not work once you add a local user and later on switch to ldap.
LDAP is working again, once the local user has been removed.

[oneiros]

I cannot reproduce this locally. I have a regular user test@example.com in the local database with password X and a user in LDAP with the same email but password Y.

I can log in as that user with password X when ldap is disabled and with password Y when ldap is enabled, just as I would expect.

I did however encounter two problems with error messages for failed logins that I addressed here: #129

[tuxmea]

Can not reproduce. But we know have better error handling in case that LDAP e.g. does not accept the password.