[Tickets #3229] NEW: cannot change ldap password without anonymous bind allowed

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=3229
-----------------------------------------------------------------------
 Ticket             | 3229
 Created By         | mi.braun at onlinehome.de
 Summary            | cannot change ldap password without anonymous bind allowed
 Queue              | Passwd
 Version            | HEAD
 State              | Unconfirmed
 Priority           | 2. Medium
 Type               | Bug
 Owners             | 
+New Attachment     | passwd.diff
-----------------------------------------------------------------------


mi.braun at onlinehome.de (2006-01-06 11:19) wrote:

Hi,

i've got horde used with an openldap server. 
After updating passwd from cvs, I got several errors while changing my ldap
password by passwd.

1. $ssl is not defined (line 68)
   I think testing $this->_params['sslhost'] is meant by this undefined
local variable.

2. "User not found" (Pear Error Message)
   This is caused as my ldap server does not allow anonymous user to read
anything.
   Therefor I'd like to introduce the optional "guestdn" und "guestpw"
configuration parameters.

3. ldap_get_values : attribute cannot be read
   Although code (line 156) tests wether the shadowMin attribute is
avaliable within the record,
   ldap_get_values fails to get it before.
   So it'd like to suppress the warning mesage, as it is really no searious
error.

4. code things it binds as admin although bind done by user
   This is caused by is_null being used instead of empty.

You find a patch to current CVS attached.

sincerly,
  Mbraun