Authorization by old password

[nickshmalik]

Hellow!

noticed the problem, tasted only on Microsoft Active Directory.

When changing the password, you can log in using the old and new password.

[jjnanthakumar]

@etianen Thank you so much for this amazing LDAP Package for Django and I would like to contribute to this project if time permits.

[etianen]

@nickshmalik - Do you have both the LDAP backend and the normal model backend enabled in your settings.py? It's possible that you have the old password also set in the database, and if both authentication backends are enabled, it's allowing authentication by either method. Or your AD server is b0rked.

@jjnanthakumar - Thanks! Help is always welcome!