bugphpGroupWare - Bugs: bug #3734, login into phpgw from sitemgr with...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #3734: login into phpgw from sitemgr with long username does not work

Submitted by:  Marco Gaiarin <gaio>
Submitted on:  Fri 23 May 2003 09:52:23 AM UTC  
 
Item Group: 0.9.14.003 releaseCategory: sitemgr
Severity: 3 - NormalPriority: 5 - Normal
Status: FixedPrivacy: Public
Assigned to: Dave Hall <skwashd>Open/Closed: Closed
Component Version: NoneOperating System: None
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

(Jump to the original submission Jump to the original submission)

Sun 04 Dec 2005 06:29:58 AM UTC, comment #10:

This has been fixed with the skwashd16-compat version of sitemgr which now uses a new and improved login block - you can just grab the latest version of the block from http://savannah.gnu.org/cgi-bin/viewcvs/phpgroupware/sitemgr/modules/class.module_login.inc.php?only_with_tag=skwashd-16-compat

Dave Hall <skwashd>
Project AdministratorIn charge of this item.
Thu 24 Nov 2005 03:56:36 AM UTC, comment #9:

<a href='http://wvvw.dynu.net/kozel/busty-amatures.html'> http://wvvw.dynu.net/kozel/busty-amatures.html - busty amatures </a> http://wvvw.dynu.net/kozel/busty-amatures.html
<a href='http://wvvw.dynu.net/masterzone/julie-chinese-sex.html'> http://wvvw.dynu.net/masterzone/julie-chinese-sex.html - julie chinese sex </a> http://wvvw.dynu.net/masterzone/julie-chinese-sex.html
<a href='http://pivasik.dynu.net/puzan/free-mature-hardcore-action.html'> http://pivasik.dynu.net/puzan/free-mature-hardcore-action.html - free mature hardcore action </a> http://pivasik.dynu.net/puzan/free-mature-hardcore-action.html
<a href='http://wvvw.dynu.net/kozel/huge-natural-breasts.html'> http://wvvw.dynu.net/kozel/huge-natural-breasts.html - huge natural breasts </a> http://wvvw.dynu.net/kozel/huge-natural-breasts.html
<a href='http://wvvw.dynu.net/masterzone/asian-14-year-old-model.html'> http://wvvw.dynu.net/masterzone/asian-14-year-old-model.html - asian 14 year old model </a> http://wvvw.dynu.net/masterzone/asian-14-year-old-model.html
<a href='http://pivasik.dynu.net/puzan/mature-vs-young-xxx.html'> http://pivasik.dynu.net/puzan/mature-vs-young-xxx.html - mature vs young xxx </a> http://pivasik.dynu.net/puzan/mature-vs-young-xxx.html
<a href='http://wvvw.dynu.net/puzan/hairy-mature-amature-men-nude.html'> http://wvvw.dynu.net/puzan/hairy-mature-amature-men-nude.html - hairy mature amature men nude </a> http://wvvw.dynu.net/puzan/hairy-mature-amature-men-nude.html
<a href='http://wvvw.dynu.net/kozel/free-cum-on-tits-pics.html'> http://wvvw.dynu.net/kozel/free-cum-on-tits-pics.html - free cum on tits pics </a> http://wvvw.dynu.net/kozel/free-cum-on-tits-pics.html
<a href='http://pivasik.dynu.net/vatnik/cyber-transsexuals.html'> http://pivasik.dynu.net/vatnik/cyber-transsexuals.html - cyber transsexuals </a> http://pivasik.dynu.net/vatnik/cyber-transsexuals.html
<a href='http://pivasik.dynu.net//free-pics-interracial-gay-sex.html'> http://pivasik.dynu.net//free-pics-interracial-gay-sex.html - free pics interracial gay sex </a> http://pivasik.dynu.net//free-pics-interracial-gay-sex.html
<a href='http://mamba.dynu.net/vatnik/free-chicks-with-dicks-videos.html'> http://mamba.dynu.net/vatnik/free-chicks-with-dicks-videos.html - free chicks with dicks videos </a> http://mamba.dynu.net/vatnik/free-chicks-with-dicks-videos.html
<a href='http://wvvw.dynu.net/puzan/women-in-the-old-west.html'> http://wvvw.dynu.net/puzan/women-in-the-old-west.html - women in the old west </a> http://wvvw.dynu.net/puzan/women-in-the-old-west.html
<a href='http://wvvw.dynu.net/door/bbw-pic-post.html'> http://wvvw.dynu.net/door/bbw-pic-post.html - bbw pic post </a> http://wvvw.dynu.net/door/bbw-pic-post.html
<a href='http://mamba.dynu.net/vatnik/breast-augmentation-shemale-pics.html'> http://mamba.dynu.net/vatnik/breast-augmentation-shemale-pics.html - breast augmentation shemale pics </a> http://mamba.dynu.net/vatnik/breast-augmentation-shemale-pics.html
<a href='http://wvvw.dynu.net/puzan/action-36-grannies.html'> http://wvvw.dynu.net/puzan/action-36-grannies.html - action 36 grannies </a> http://wvvw.dynu.net/puzan/action-36-grannies.html
<a href='http://mamba.dynu.net/vatnik/hermaphrodite-gallery-pics-free.html'> http://mamba.dynu.net/vatnik/hermaphrodite-gallery-pics-free.html - hermaphrodite gallery pics free </a> http://mamba.dynu.net/vatnik/hermaphrodite-gallery-pics-free.html
<a href='http://pivasik.dynu.net/masterzone/nude-asians.html'> http://pivasik.dynu.net/masterzone/nude-asians.html - nude asians </a> http://pivasik.dynu.net/masterzone/nude-asians.html
<a href='http://pivasik.dynu.net/puzan/german-mature-amateur-amalia-pics.html'> http://pivasik.dynu.net/puzan/german-mature-amateur-amalia-pics.html - german mature amateur amalia pics </a> http://pivasik.dynu.net/puzan/german-mature-amateur-amalia-pics.html
<a href='http://pivasik.dynu.net//nterracial-blow-job-mpeg.html'> http://pivasik.dynu.net//nterracial-blow-job-mpeg.html - nterracial blow job mpeg </a> http://pivasik.dynu.net//nterracial-blow-job-mpeg.html
<a href='http://mamba.dynu.net/puzan/60-year-old-woman-new-zealand.html'> http://mamba.dynu.net/puzan/60-year-old-woman-new-zealand.html - 60 year old woman new zealand </a> http://mamba.dynu.net/puzan/60-year-old-woman-new-zealand.html
<a href='http://wvvw.dynu.net/vatnik/shemale-realdoll-pictures.html'> http://wvvw.dynu.net/vatnik/shemale-realdoll-pictures.html - shemale realdoll pictures </a> http://wvvw.dynu.net/vatnik/shemale-realdoll-pictures.html
<a href='http://wvvw.dynu.net/kozel/womens-boobs.html'> http://wvvw.dynu.net/kozel/womens-boobs.html - womens boobs </a> http://wvvw.dynu.net/kozel/womens-boobs.html
<a href='http://mamba.dynu.net/kozel/free-asian-big-tits-thumbnail-post-list.html'> http://mamba.dynu.net/kozel/free-asian-big-tits-thumbnail-post-list.html - free asian big tits thumbnail post list </a> http://mamba.dynu.net/kozel/free-asian-big-tits-thumbnail-post-list.html
<a href='http://mamba.dynu.net/vatnik/tranny-lesbian-sex.html'> http://mamba.dynu.net/vatnik/tranny-lesbian-sex.html - tranny lesbian sex </a> http://mamba.dynu.net/vatnik/tranny-lesbian-sex.html
<a href='http://pivasik.dynu.net/masterzone/japanese-baby-names.html'> http://pivasik.dynu.net/masterzone/japanese-baby-names.html - japanese baby names </a> http://pivasik.dynu.net/masterzone/japanese-baby-names.html
<a href='http://mamba.dynu.net/vatnik/free-transvestite-fiction.html'> http://mamba.dynu.net/vatnik/free-transvestite-fiction.html - free transvestite fiction </a> http://mamba.dynu.net/vatnik/free-transvestite-fiction.html
<a href='http://wvvw.dynu.net/green/vaginal-cumshots-4837.html'> http://wvvw.dynu.net/green/vaginal-cumshots-4837.html - vaginal cumshots 4837 </a> http://wvvw.dynu.net/green/vaginal-cumshots-4837.html
<a href='http://wvvw.dynu.net/masterzone/asian-sex-movie-free.html'> http://wvvw.dynu.net/masterzone/asian-sex-movie-free.html - asian sex movie free </a> http://wvvw.dynu.net/masterzone/asian-sex-movie-free.html
<a href='http://pivasik.dynu.net/puzan/handsome-older-gay-men.html'> http://pivasik.dynu.net/puzan/handsome-older-gay-men.html - handsome older gay men </a> http://pivasik.dynu.net/puzan/handsome-older-gay-men.html
<a href='http://mamba.dynu.net/puzan/mature-post-women.html'> http://mamba.dynu.net/puzan/mature-post-women.html - mature post women </a> http://mamba.dynu.net/puzan/mature-post-women.html
<a href='http://mamba.dynu.net/vatnik/transvestite-humiliation-public-panties.html'> http://mamba.dynu.net/vatnik/transvestite-humiliation-public-panties.html - transvestite humiliation public panties </a> http://mamba.dynu.net/vatnik/transvestite-humiliation-public-panties.html
WBR aCmxdZIyfzGslpqBJ

Anonymous
Mon 24 Nov 2003 04:45:54 PM UTC, comment #8:

I've not noted before, but the same bug appear also on a different site, that use LDAP for user account and autentication (a clean LDAP setup).

Again, if some user log in from sitemgr, email does not work because the email app try to login into the IMAP server with all the LDAP OI and not only with username.

The good news is that this installation is public accessible from the internet, i can create account and so we can setup a testbase, if you want.

Marco Gaiarin <gaio>
Wed 05 Nov 2003 11:29:41 AM UTC, comment #7:

I'm not a PHP expert, but also i found strange this bug.

Yes you are right, the ldap string came from pam, because i'm moving from an NT4 server (and domain) to an LDAP/samba3 network, so for now i've the user database in LDAP but not the password.
To authenticate, i've configured the imap daemon to use pam_smb module, and i'm using MAIL as authentication method.

With this setup this log mean that:

1) user walter login within sitemgr, that trigger a connect/disconnect to the imap server, and all went well.

2) user walter try to access the webmail, and the email app try a login with user "uid=walter,ou=People,dc=pp,dc=lnf,dc=it", clearly not valid.

if user walter do the login in main phpgw login page, all went well, so:

1) user walter login, so there's a connect/disconnet to the imap server only for authentication purpose

2) user walter use the webmail, and the email app login to the imap server with corred user walter.

I know that this is strange, but... the bug remain, and is fully repruducible... ;(((

Marco Gaiarin <gaio>
Tue 04 Nov 2003 03:31:13 PM UTC, comment #6:

I don't understand what sitemgr login has do with this, it calls the same methods as the normal login right? I would think that it has to. The ldap string is from pam_ldap, nothing to do with phpgw. The only thing I can think of is that sitemgr is not using the same methods as the login page (wrongly so) and is not saving the password for using by the email app.

Chris Weiss <cw>
Project Administrator
Mon 03 Nov 2003 08:18:18 PM UTC, comment #5:

I am very sorry that I am of no help in this bug:
Firstly, I am no longer maintaining sitemgr, since my current situation does not leave me time for it.
But I'd given it a try, if I had any clue. But I think this bug must be handled by someone familiar with how phpgroupware handles LDAP.
Michael Totschnig

Anonymous
Thu 30 Oct 2003 04:09:38 PM UTC, comment #4:

Ok, now i've more info, more bad news.

I'm experiencing now and then that some user (with any browser, this is not a browser-related problem) cannot use email if they have login within sitemgr login box.

From zero: with some user (not my user gaio) if i login within sitemgr login box, i can use all the phpgw application without problems, but i cannot use the mail (email) application.
Note that i'm using LDAP to store account but IMAP to authenticate user.

I've looked at the imap log on server and i've found that when i login to phpgw:

Oct 30 17:02:20 gandalf imapd[27314]: connect from 10.27.1.4
Oct 30 17:02:20 gandalf imapd[27314]: imap service init from 10.27.1.4
Oct 30 17:02:20 gandalf imapd[27314]: Authenticated user=walter host=gandalf.pp.lnf.it [10.27.1.4]
Oct 30 17:02:20 gandalf imapd[27314]: Logout user=walter host=gandalf.pp.lnf.it [10.27.1.4]

all went well, but when i try to access the email app:

Oct 30 17:02:26 gandalf imapd[27317]: connect from 10.27.1.4
Oct 30 17:02:26 gandalf imapd[27317]: imap service init from 10.27.1.4
Oct 30 17:02:29 gandalf imapd[27317]: pam_ldap: error trying to bind as user "uid=walter,ou=People,dc=pp,dc=lnf,dc=it" (Invalid credentials)

note that the entire LDAP entry are passed as user to the imap server, that clearly know nothing about the user "uid=walter,ou=People,dc=pp,dc=lnf,dc=it".

If i logout, and then login back with the main phpgw login page, i can access email with no problem at all.

If i can help, say me, but please fix this nasty bug! ;)

Marco Gaiarin <gaio>
Thu 12 Jun 2003 09:28:24 AM UTC, comment #3:

Sorry for the big late, i was very busy... i've a bad news. I've tried a different browser (mozilla under linux) and a different (long) user (aangarano) and there's the same thing.

If i log in within the login box of sitemgr, all seems works well apart mail app that pops up an IMAP authentication error; if i logout and login back within the main phpgw login page all went well.

Yes, i'm using cookies and php4 sessions.

Marco Gaiarin <gaio>
Fri 30 May 2003 05:26:27 AM UTC, comment #2:

I am not sure how to debug this, since I do not use phpgw's email. Did you doublecheck with a different long username if the same problem arises? Do you have different installations of phpgroupware on the same machine?

Michael Totschnig <totschnig>
Thu 29 May 2003 12:36:51 AM UTC, comment #1:

Weird. I have looked at the 14 code for sitemgr login, it just posts phpgw login. Are you using cookies? what type of sessions are you using? php4 or db?

Dave Hall <skwashd>
Project AdministratorIn charge of this item.
Fri 23 May 2003 09:52:23 AM UTC, original submission:

It's a strange thing, but i can full reproduce this bug on my phpgw installation (debian woody, phpgw cvs updated).

A user with long username (defabritiis) can login in phpgw from sitemgr with the login box, but cannot use the email (imap complain bad user/pass).
The same user can login into phpgw via phpgw login page, and are able to use the mail app with no problem at all.

My user (gaio) can login succesfully both via sitemgr and directly.

Marco Gaiarin <gaio>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Sun 04 Dec 2005 06:29:58 AM UTCskwashdStatusNone=>Fixed
  Assigned tototschnig=>skwashd
  Open/ClosedOpen=>Closed
Thu 29 May 2003 12:36:51 AM UTCskwashdAssigned toNone=>NA

Back to the top


Powered by Savane 3.1-cleanup1