bugphpGroupWare - Bugs: bug #2340, LDAP module: serious bug looking...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #2340: LDAP module: serious bug looking up groups

Submitted by:  None
Submitted on:  Mon 20 Jan 2003 10:27:15 PM UTC  
 
Item Group: 0.9.14 releaseCategory: API - Setup
Severity: 3 - NormalPriority: 5 - Normal
Status: NonePrivacy: Public
Assigned to: Philipp Kamps <fipsfuchs>Open/Closed: Closed
Component Version: NoneOperating System: GNU/Linux - RedHat/Fedora
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Mon 20 Jan 2003 10:27:15 PM UTC, original submission:

in ldapmodify.php:
instead of

$srg = ldap_search($ldap,$config['ldap_group_context'],'(|(cn=*))',array('gidnumber','cn','memberuid'));
(about line 96)

should be

$srg = ldap_search($ldap,$config['ldap_group_context'],'(|(objectclass=posixGroup))',array('gidnumber','cn','memberuid'));

Object class = posixGroup is the valid form for searching groups

you should also consider seriously adding support for groupOfNames object class.

Manuel Amador (Rudd-O)
diradmin.open-it.org

PS: guys, you should seriously reconsider working on another job. Your code doesn't even bother to check for the most obvious error conditions. We had all kinds of errors. No one in their right mind would deem it usable.
Take a page from the OWASP how to program secure web applications.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 3 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Mon 01 Mar 2004 05:25:41 PM UTCfipsfuchsOpen/ClosedOpen=>Closed
Tue 20 Jan 2004 11:56:17 AM UTCpowerstatAssigned toInvalid User ID=>fipsfuchs
Thu 23 Jan 2003 06:48:05 AM UTCskwashdAssigned toNone=>NA

Back to the top


Powered by Savane 3.1-cleanup1