[horde] storing prefs in ldap

[Tjeerd van der Zee]

----- Original Message -----
From: "Edwin Culp" <eculp at encontacto.net>
To: <horde at lists.horde.org>
Sent: Thursday, June 20, 2002 4:41 AM
Subject: Re: [horde] storing prefs in ldap


> Quoting Tjeerd van der Zee <tjeerd.vdzee at chello.nl>:
>
>  | Hi,
>  |
>  | I was trying to get the personal addressbook working for turba, but i
wanted
>  | to allow users to add their
>  | own entries so i modified the acl list of ldap and horde.php to remove
the
>  | rootdn entry.
>  |
>  | but now when storing preferences, i need to fill in the whole basedn,
>  | otherwise it refuses to store the preferences.
>  |
>  | my ldap setup is like this:
>  |
>  | mail=user @ xar.nl, ou=xar.nl,ou=mailaccounts,o=xar.nl
>  | mail=user @ aequitas.dhs.org,
ou=aequitas.dhs.org,ou=mailaccounts,o=xar.nl
>  |
>  | when using rootdn, both vdomains are accessible and i only need to
specify
>  | ou=mailaccounts,o=xar.nl as basedn.
>  |
>  | Searching is possible by anonymous.
>  |
>  | Anyone got an idea what could cause this ?
>
> I am going to guess that the bind dn is the base dn plus the uid from
> hord.php.  This would would try to bind on
>
>   mail=user @ xar.nl,ou=mailaccounts,o=xar.nl
>   mail=user @ aequitas.dhs.org,ou=mailaccounts,o=xar.nl
>
> rather than the above but I could be wrong.  The bind should be visible
> in your slapd.log.  Pleas let me know if I'm mistaken and I hope I am:-)
>
> ed
>

Yes, you are correct about the bind proccess, but couldn't horde do a
ldap_get_dn and then bind as the user
with it's full dn instead of user + basedn ? anonymous can search and read
the entries.

Tjeerd.