[Tickets #8246] Re: LDAP Prefs backend, kronolith tries to bind w/o password

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8246
------------------------------------------------------------------------------
  Ticket             | 8246
  Updated By         | m.rolke at linux-ag.com
  Summary            | LDAP Prefs backend, kronolith tries to bind w/o
                     | password
  Queue              | Kronolith
  Version            | 2.3.1
  Type               | Bug
  State              | Unconfirmed
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
+New Attachment     |  
0003-fix-8246-LDAP-Prefs-backend-kronolith-tries-to.patch
------------------------------------------------------------------------------


m.rolke at linux-ag.com (2009-05-07 08:27) wrote:

There are five places in kronolith where the preference system is  
being instanciated:
I see only the need to patch one place (see attachment).
Please correct me if i'm wrong.

grep -n "Prefs::" * -r

> kronolith/fb.php:36:        $prefs =  
> &Prefs::singleton($conf['prefs']['driver'], 'kronolith', $user, '',  
> null, false);
the logged-in users password won't help here, because fb.php is  
accessed by some other user? so there is no need for a patch.

> kronolith/lib/Kronolith.php:1796:        $prefs =  
> &Prefs::singleton($GLOBALS['conf']['prefs']['driver'],
needs to be patched. see attachment

> kronolith/lib/api.php:1348:                    $prefs =  
> &Prefs::singleton($GLOBALS['conf']['prefs']['driver'],
the alarms of the logged in users should be retrieved via $prefs =  
&$GLOBALS['prefs']; for other users, the logged-in user password won't  
help, i think. no
patch needed

> kronolith/scripts/agenda.php:75:        $prefs =  
> Prefs::singleton($GLOBALS['conf']['prefs']['driver'],
Script, no need for user password.

> kronolith/scripts/upgrades/convert_to_utc.php:52:        $prefs =  
> Prefs::factory($conf['prefs']['driver'], 'horde',
Script, no need for user password.