[Tickets #12317] resetpassword doesn't reset password

noreply at bugs.horde.org noreply at bugs.horde.org
Fri Jun 7 07:16:07 UTC 2013


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12317
------------------------------------------------------------------------------
  Ticket             | 12317
  Created By         | maciej.uhlig at us.edu.pl
  Summary            | resetpassword doesn't reset password
  Queue              | Horde Groupware Webmail Edition
  Version            | 5.1.0
  Type               | Bug
  State              | Unconfirmed
  Priority           | 3. High
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


maciej.uhlig at us.edu.pl (2013-06-07 07:16) wrote:

Although resetpassword.php mails "Your password has been reset" the  
password is actually not changed. The reason is as follows:

\services\resetpassword.php calls
$password = $auth->resetPassword($info['username']);
there is no exception and success mail is sent, but...

\Horde\Auth\Ldap.php makes an argument for LDAP modify as:

$entry = array(
             'userpassword' =>  
Horde_Auth::getCryptedPassword($password,........

and passes it to LDAP modify:

$this->_ldap->modify($dn, $entry);

there is no exception once more because:

\Horde\Ldap.php modify()

tell us: The $params argument is an array of actions and should be  
something like
      * this:

Obviously the passed parameter is not an array of actions - see debug file:

     public function modify($entry, $parms = array())
     {
Horde::debug($parms, "/tmp/horde_debug_parms");

horde-5 tmp # cat horde_debug_parms
2013-06-07T06:32:59+00:00 DEBUG: Variable information:
array(1) {
   'userpassword' =>
   string(38) "{SSHA}Jk4...6hAkuNdkD5Na5s...O632e4oLN"
}

Backtrace:
1. Horde_Core_Auth_Application->resetPassword()  
/data/var/www/webmail/services/resetpassword.php:74
2. Horde_Auth_Ldap->resetPassword()  
/usr/share/php/Horde/Core/Auth/Application.php:389
3. Horde_Ldap->modify() /usr/share/php/Horde/Auth/Ldap.php:432
4. Horde::debug() /usr/share/php/Horde/Ldap.php:684

horde-5 tmp #









More information about the bugs mailing list