[Tickets #3984] NEW: change user password fails without anonymous search allowed

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=3984
-----------------------------------------------------------------------
 Ticket             | 3984
 Created By         | mi.braun at onlinehome.de
 Summary            | change user password fails without anonymous search allowed
 Queue              | Passwd
 Version            | HEAD
 State              | Unconfirmed
 Priority           | 1. Low
 Type               | Bug
 Owners             | 
+New Attachment     | ldap-respect-userdn-hook-before-connecting.diff
-----------------------------------------------------------------------


mi.braun at onlinehome.de (2006-05-30 12:01) wrote:

Hi,

i'm using the ldap and smbldap backend to let the user change its ldap
password.
My ldap server does not allow the anonymous user search the entire user
database and I don't want to provide and admindn for security reasons.

Even with the _passwd_userdn hook enabled, this won't work as the ldap
backend does not respect this hook when connecting for checking for the
users existence.

So I wrote a patch that moves the _lookupDN function from smbldap.php to
ldap.php and fixes ldap.php to use the same initialisation as smbldap.php
using _lookupDN .