From a3bb889def63294f8fd475ea9e4216186dc149f4 Mon Sep 17 00:00:00 2001
From: FreddleSpl0it <patschul@posteo.de>
Date: Tue, 20 Feb 2024 11:41:02 +0100
Subject: [PATCH] [Web] fix set_tfa for ldap users

---
 data/web/inc/functions.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/data/web/inc/functions.inc.php b/data/web/inc/functions.inc.php
index 1e9f35072..94d81e9ea 100644
--- a/data/web/inc/functions.inc.php
+++ b/data/web/inc/functions.inc.php
@@ -1072,7 +1072,7 @@ function set_tfa($_data) {
     if ($row) {
       if ($row['authsource'] == 'ldap'){
         $iam_settings = identity_provider('get');
-        if (!ldap_mbox_login($username, $row['password'], $iam_settings)) $access_denied = true;
+        if (!ldap_mbox_login($username, $_data["confirm_password"], $iam_settings)) $access_denied = true;
         else $access_denied = false;
       } else {
         if (!verify_hash($row['password'], $_data["confirm_password"])) $access_denied = true;