matomo-org / matomo-org/plugin-LoginLdap
Multiple LDAP searches for single session in "Web Server Auth" mode
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 37
- Forks
- 30
- Avg merge
- 22h 53m
- Merged PRs (30d)
- 19
Description
When the "`Use Web Server Auth (e.g. Kerberos SSO)`" mode is enabled, the plugin performs LDAP binding & searching not just at the beginning of user's session, but for subsequent HTTP requests as well.
Which causes tens and hundreds of LDAP searches for single user session.
Seems as a result of unset cookie or something like that.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue with “Use Web Server Auth (e.g. Kerberos SSO)” enabled and observe whether one session triggers LDAP binding and searches on each HTTP request. Investigate the session or cookie state first; done means a single user session no longer performs repeated LDAP searches while subsequent requests remain authenticated.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100