bugphpGroupWare - Bugs: bug #800, Authentication via mail server...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #800: Authentication via mail server doesn't work.

Submitted by:  None
Submitted on:  Thu 04 Jul 2002 12:20:05 PM UTC  
 
Item Group: 0.9.14 RC3Category: API - phpGroupware API
Severity: 3 - NormalPriority: 5 - Normal
Status: FixedPrivacy: Public
Assigned to: Mark A Peters <skeeter>Open/Closed: Closed
Component Version: NoneOperating System: None
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Mon 02 Sep 2002 10:26:54 PM UTC, comment #5:

What gets me here, is that if the account doesn't exist just yet, why would it still be returning that the account_type is == 'g' (denoting that it is a group.) That line is important in here as it verifies that the user is not attempting to login as a user group. Because for the most part, those account types (groups) are insecure.

Now, I've looked at the accounts->get_type() function and everything in there looks like it would return False if the account does not exist. What method of account repository are you using (LDAP/sql/??)?

Thanks,
Mark A Peters (Skeeter)

Mark A Peters <skeeter>
Project AdministratorIn charge of this item.
Mon 02 Sep 2002 02:34:52 AM UTC, comment #4:

I think I have a solution for this in CVS. Try grabbing an update of the .14 branch, and give it a try and see if that corrects the problem. Let us know your results, so I can close this out if it works correctly for you.

Thanks,
Mark A Peters (Skeeter)

Mark A Peters <skeeter>
Project AdministratorIn charge of this item.
Thu 22 Aug 2002 12:47:10 AM UTC, comment #3:

I have the same problem with NIS and MySQL. It seems to be in class.sessions_db.inc.php, when loging in as a valid NIS user without a phpgw account in the SQL database.

The following statement is causing it. Its purpose is to check if the login is correct (which works) and to see if the account is no group but a user (which fails in get_type because the account is not yet created)

if (! $GLOBALS['phpgw']->auth->authenticate($this->account_lid, $this->passwd, $this->passwd_type) || $GLOBALS['phpgw']->accounts->get_type($this->account_lid) == 'g')
{
echo "could not authenticate<br>";
return False;
exit;
}

You have to split the two checks and test for a group after the auto_add statement some lines below.

I try to attach the working version of that file.

Hope that helps,
Stefan Heimers (stefan@heimers.ch)

Anonymous
Tue 20 Aug 2002 07:42:30 AM UTC, comment #2:

how did you get the authentication by email to work? I want to use this method but, as you state, it does not work.

Anonymous
Sat 06 Jul 2002 08:28:02 AM UTC, comment #1:

This also seems to happen with other auth methods when Email is selected, FeLaMiMail works, though!

Anonymous
Thu 04 Jul 2002 12:20:05 PM UTC, original submission:

Ok, it took me some time to get login to send correct usernames to the mailserver (why can't it just send what there's in the box? I mean it really makes not much sense to me that it strips @domain away so I have to mess with setup to get it back. Further it makes it absolutely impossible to use the same install with more than one domain, so what about just sending the username the user entered to the mail server?) I now end up
with the following error message:

Database error: Invalid SQL: SELECT account_type FROM phpgw_accounts WHERE account_id=

File: /web/apache_root/phpgroupware/phpgwapi/inc/class.accounts_sql.inc.php
Line: 232

Session halted.
Fatal error: Call to undefined function: parse_navbar_end() in /web/apache_root/phpgroupware/phpgwapi/inc/footer.inc.php on line 62

The weird thing is that if I switch back to SQL authentication in setup, it will work perfectly again!

Anonymous

 

Attached Files
file #74:  class.sessions_db.inc.php added by None (32KiB - text/plain - fixed verion of that file (login without sql account))

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Tue 03 Sep 2002 10:52:01 PM UTCskeeterClosed on-=>-
Tue 03 Sep 2002 10:52:00 PM UTCskeeterOpen/ClosedOpen=>(Error - Not Found)
Mon 02 Sep 2002 02:34:52 AM UTCskeeterStatusNone=>(Error - Not Found)
  Assigned toNone=>NA

Back to the top


Powered by Savane 3.1-cleanup1