actually validate that the LDAP bind succeeded

src/auth/backends.rs

@@ -170,10 +170,22 @@ impl ValidateLogin for LdapBackend {
         {
             let (conn, mut ldap) = start_ldap_connection(&self.config).await?;
             drive!(conn);
-            ldap.simple_bind(&search_entry.dn, password.0.expose_secret())
+            if let Err(ldap_error) = ldap
-                .await?;
+                .simple_bind(&search_entry.dn, password.0.expose_secret())
+                .await?
+                .success()
+            {
+                event!(
+                    Level::TRACE,
+                    dn = search_entry.dn,
+                    ldap_error = ldap_error.to_string(),
+                    "LDAP bind failed"
+                );
+                return Err(AuthenticationError::InvalidUserOrPassword);
+            }
         }
 
+        event!(Level::INFO, dn = search_entry.dn, "LDAP bind succeeded");
         Ok(uid)
     }
 }