[Tickets #12128] Re: Bad search filter ldap Groups

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12128
------------------------------------------------------------------------------
  Ticket             | 12128
  Updated By         | nlindq at maei.ca
  Summary            | Bad search filter ldap Groups
  Queue              | Horde Framework Packages
  Version            | Git master
  Type               | Bug
  State              | Assigned
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             | Jan Schneider
------------------------------------------------------------------------------


nlindq at maei.ca (2014-03-20 21:02) wrote:

I'm also having this issue, and in my case I'm wondering whether it's  
related to use of a non-standard UID.

 From my horde/config/conf.php:

[...]
$conf['auth']['params']['uid'] = 'mail';
[...]
$conf['auth']['params']['driverconfig'] = 'horde';
$conf['auth']['driver'] = 'ldap';
[...]

 From function listUsers in pear/Horde/Group/Ldap.php:

[....]
             $users = array();
             foreach ($entry->getValue($attr, 'all') as $user) {
                 $dn = Horde_Ldap_Util::explodeDN($user,
                                                  array('onlyvalues' => true));
                 // Very simplified approach: assume the first element  
of the DN
                 // contains the user ID.
                 $user = $dn[0];
                 // Check for multi-value RDNs.
                 if (is_array($element)) {
                     $user = $element[0];
                 }
                 $users[] = $user;
             }
             return $users;
[....]

In my case, the dn does not contain the "mail" attribute which I'm for  
authentication to ease virtual domain authentication with IMP/Cyrus  
IMAPD.

Groups are properly listed in the Admin interface, but if I expand the  
groups in the interface, members are listed as bare uids rather than  
e-mail addresses.