Ubuntu
inspircd package

ldapauth module does not handle user:pass format correctly

Bug #1428209 reported by LaMont Jones on 2015-03-04

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	inspircd (Ubuntu)	Fix Released	Undecided	Unassigned

Bug Description

There are a couple of issues with m_ldapauth's handling of password="$USER:$PASS" (2.0.17-2 and still in 2.0.18. I didn't look at 2.0.5)

1) When it does the second ldapsearch, it asks for '$USER' rather than '$ATTRIBUTE=$USER' as in the first search
2) if the first search matches, then the password is not separated.

lamont

Tags:

Revision history for this message

LaMont Jones (lamont) wrote on 2015-03-04:

10_fix_ldapauth_userpass.diff Edit (1.7 KiB, text/plain)

patch to fix the various issues

Ubuntu Foundations Team Bug Bot (crichton) on 2015-03-04

tags:

added: patch

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-05-06:

This bug was fixed in the package inspircd - 2.0.21-1ubuntu1

---------------
inspircd (2.0.21-1ubuntu1) yakkety; urgency=medium

  * Fix ldapauth when given PASS=user:pass LP: #1428209
    + 10_fix_ldapauth_userpass.diff
  * ldapauth logging enhancements LP: #1437044
    + 15_ldapauth_logging.diff
  * Support logrotate, by reopening log files on rehash (SIGHUP) LP: #1437030
    + 20_close-open-logs-on-rehash.diff

-- LaMont Jones <email address hidden> Fri, 06 May 2016 07:18:48 -0600