[Tickets #12317] resetpassword doesn't reset password
noreply at bugs.horde.org
noreply at bugs.horde.org
Fri Jun 7 07:16:07 UTC 2013
DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: http://bugs.horde.org/ticket/12317
------------------------------------------------------------------------------
Ticket | 12317
Created By | maciej.uhlig at us.edu.pl
Summary | resetpassword doesn't reset password
Queue | Horde Groupware Webmail Edition
Version | 5.1.0
Type | Bug
State | Unconfirmed
Priority | 3. High
Milestone |
Patch |
Owners |
------------------------------------------------------------------------------
maciej.uhlig at us.edu.pl (2013-06-07 07:16) wrote:
Although resetpassword.php mails "Your password has been reset" the
password is actually not changed. The reason is as follows:
\services\resetpassword.php calls
$password = $auth->resetPassword($info['username']);
there is no exception and success mail is sent, but...
\Horde\Auth\Ldap.php makes an argument for LDAP modify as:
$entry = array(
'userpassword' =>
Horde_Auth::getCryptedPassword($password,........
and passes it to LDAP modify:
$this->_ldap->modify($dn, $entry);
there is no exception once more because:
\Horde\Ldap.php modify()
tell us: The $params argument is an array of actions and should be
something like
* this:
Obviously the passed parameter is not an array of actions - see debug file:
public function modify($entry, $parms = array())
{
Horde::debug($parms, "/tmp/horde_debug_parms");
horde-5 tmp # cat horde_debug_parms
2013-06-07T06:32:59+00:00 DEBUG: Variable information:
array(1) {
'userpassword' =>
string(38) "{SSHA}Jk4...6hAkuNdkD5Na5s...O632e4oLN"
}
Backtrace:
1. Horde_Core_Auth_Application->resetPassword()
/data/var/www/webmail/services/resetpassword.php:74
2. Horde_Auth_Ldap->resetPassword()
/usr/share/php/Horde/Core/Auth/Application.php:389
3. Horde_Ldap->modify() /usr/share/php/Horde/Auth/Ldap.php:432
4. Horde::debug() /usr/share/php/Horde/Ldap.php:684
horde-5 tmp #
More information about the bugs
mailing list