ldap: Prevent useless password resets when email auth is not enabled.

While the passwords wouldn't do anything without email auth enabled
anyway, it's probably better not to have users be able to go through
the flow.

zerver/forms.py

@@ -26,7 +26,7 @@ from zerver.lib.subdomains import get_subdomain, check_subdomain, is_root_domain
 from zerver.lib.users import check_full_name
 from zerver.models import Realm, get_user_profile_by_email, UserProfile, \
     get_realm, email_to_domain, email_allowed_for_realm
-from zproject.backends import password_auth_enabled
+from zproject.backends import email_auth_enabled
 
 import logging
 import re
@@ -191,7 +191,7 @@ class ZulipPasswordResetForm(PasswordResetForm):
         users who don't have a usable password to reset their
         passwords.
         """
-        if not password_auth_enabled:
+        if not email_auth_enabled():
             logging.info("Password reset attempted for %s even though password auth is disabled." % (email,))
             return []
         result = UserProfile.objects.filter(email__iexact=email, is_active=True,

zerver/tests/test_signup.py

@@ -250,6 +250,25 @@ class PasswordResetTest(ZulipTestCase):
         self.assertIn("Psst. Word on the street is that you",
                       message.body)
 
+    @override_settings(AUTHENTICATION_BACKENDS=('zproject.backends.ZulipLDAPAuthBackend',
+                                                'zproject.backends.ZulipDummyBackend'))
+    def test_ldap_auth_only(self):
+        # type: () -> None
+        """If the email auth backend is not enabled, password reset should do nothing"""
+        email = self.example_email("hamlet")
+        result = self.client_post('/accounts/password/reset/', {'email': email})
+
+        # check the redirect link telling you to check mail for password reset link
+        self.assertEqual(result.status_code, 302)
+        self.assertTrue(result["Location"].endswith(
+            "/accounts/password/reset/done/"))
+        result = self.client_get(result["Location"])
+
+        self.assert_in_response("Check your email to finish the process.", result)
+
+        from django.core.mail import outbox
+        self.assertEqual(len(outbox), 0)
+
     def test_redirect_endpoints(self):
         # type: () -> None
         '''