ldapauth module does not handle user:pass format correctly

Bug #1428209 reported by LaMont Jones on 2015-03-04
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
inspircd (Ubuntu)
Undecided
Unassigned

Bug Description

There are a couple of issues with m_ldapauth's handling of password="$USER:$PASS" (2.0.17-2 and still in 2.0.18. I didn't look at 2.0.5)

1) When it does the second ldapsearch, it asks for '$USER' rather than '$ATTRIBUTE=$USER' as in the first search
2) if the first search matches, then the password is not separated.

lamont

LaMont Jones (lamont) wrote :

patch to fix the various issues

tags: added: patch
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package inspircd - 2.0.21-1ubuntu1

---------------
inspircd (2.0.21-1ubuntu1) yakkety; urgency=medium

  * Fix ldapauth when given PASS=user:pass LP: #1428209
    + 10_fix_ldapauth_userpass.diff
  * ldapauth logging enhancements LP: #1437044
    + 15_ldapauth_logging.diff
  * Support logrotate, by reopening log files on rehash (SIGHUP) LP: #1437030
    + 20_close-open-logs-on-rehash.diff

 -- LaMont Jones <email address hidden> Fri, 06 May 2016 07:18:48 -0600

Changed in inspircd (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers