[horde] ldap groups and bad filters

LALOT Dominique dom.lalot at gmail.com
Fri Mar 9 11:29:18 UTC 2012


Hello,

I've noticed a problem but skip it for a long time. This morning I spent
some time on it.

Mar  9 11:34:40 horde41 HORDE: [nag] PHP ERROR: Undefined index:
objectclass [pid 21367 on line 285 of
"/usr/share/php/Horde/Ldap/Filter.php"]
Mar  9 11:34:40 horde41 HORDE: [nag] PHP ERROR: Undefined index:
objectclass [pid 21367 on line 286 of
"/usr/share/php/Horde/Ldap/Filter.php"]
Mar  9 11:34:40 horde41 HORDE: [nag] PHP ERROR: Undefined index: uid [pid
21367 on line 863 of "/usr/share/php/Horde/Ldap.php"]
Mar  9 11:34:40 horde41 HORDE: [nag] PHP ERROR: Undefined index: uid [pid
21367 on line 867 of "/usr/share/php/Horde/Ldap.php"]
Mar  9 11:34:40 horde41 HORDE: [nag] Bad search
filter#012Parameters:#012Base: ou=groups,dc=univmed,dc=fr#012Filter:
(&(objectclass=)(=b805030))#012Scope: sub [pid 21367 on line 395 of
"/usr/share/php/Horde/Group/Ldap.php"]

I put some traces in it and found what was going wrong. In fact, I don't
use LDAP auth driver but a custom transparent driver based on CAS SSO.
So my ldap setup is minimalist (the ldap part of conf.php), and it cause
some problem in some parts of horde.

I've added that in conf.local.php
$conf['group']['params']['uid'] = 'uid'; # manque car pas d'auth LDAP
$conf['group']['params']['objectclass'] = array('amuperson'); # manque aussi

and also modify the base DN of the search for the groups. In fact if I say:
search in ou=groups, the findUserDN method is not able to find the DN,
since the user is in the ou=people branch
I change the base DN to the root which is not efficient. So it's working
for me but I suppose there is something to improve!

Dom


-- 
Dominique LALOT
Ingénieur Systèmes et Réseaux
http://annuaire.univmed.fr/showuser.php?uid=lalot


More information about the horde mailing list