Summary | Successful password change leads to infinite loading of site |
Queue | Passwd |
Queue Version | Git master |
Type | Bug |
State | Duplicate |
Priority | 1. Low |
Owners | |
Requester | stephan (at) admin (dot) nabira (dot) de |
Created | 08/17/2011 (5042 days ago) |
Due | |
Updated | 09/14/2011 (5014 days ago) |
Assigned | |
Resolved | 08/17/2011 (5042 days ago) |
Milestone | |
Patch | No |
will try uploading a zipped version.
I will copy and paste the contents of the diff-file.
---------------------------- passwd/lib/Passwd.php
----------------------------
index 05612a8..71e612f 100644
@@ -105,6 +105,13 @@ class Passwd {
{
if ($GLOBALS['registry']->getAuthCredential('password') ==
$old_password) {
$GLOBALS['registry']->setAuthCredential('password',
$new_password);
+
+ // Generate an authenticateFailure to force a logout after
successful password change.
+ // This is a workaround until Horde Framework supports propagation
of credential changes to applications
+ $GLOBALS['registry']->authenticateFailure('horde' ,
+ new Horde_Auth_Exception(
+ 'Ihr Passwort wurde erfolgreich geƤndert. Bitte melden Sie sich neu an.',
+ Horde_Registry::PERMISSION_DENIED) );
}
}
New Attachment: Passwd.php.zip
will try uploading a zipped version.
New Attachment: Passwd.php[1].diff
backends are working without problems so unconditional logout is no
good option for these cases.
directly as authenticator, although Horde may do that internally,
which I do not know.
My config regarding this is:
horde4/config/conf.php:
...
$conf['auth']['params']['hostspec'] = 'mail.hostname.de';
$conf['auth']['params']['port'] = 143;
$conf['auth']['params']['secure'] = 'tls';
$conf['auth']['driver'] = 'imap';
...
horde4/imp/config/backends.php:
...
$servers['imap'] = array(
'disabled' => false,
'name' => 'IMAP Server',
'hostspec' => 'mail.hostname.de',
'hordeauth' => false,
'protocol' => 'imap',
'port' => 143,
'secure' => 'tls',
'maildomain' => '',
'cache' => false,
);
database. I have tried authenticating against the DB directly but
regarding this problem there is no change in behaviour.
"duplicated" bug is solved. If your policy sees this another way
please merge the tickets if you like.
Jan, your words on the horde mailing list on 27.07.2011 20:24 where:
"Why don't you open a ticket and upload a patch? Thanks."
So I did.
Not to offend you in any way but the diff file is empty.
You should have mentioned it is about imp application auth. Other
backends are working without problems so unconditional logout is no
good option for these cases.
What passwd backend is used here?
"duplicated" bug is solved. If your policy sees this another way
please merge the tickets if you like.
Jan, your words on the horde mailing list on 27.07.2011 20:24 where:
"Why don't you open a ticket and upload a patch? Thanks."
So I did.
New Attachment: Passwd.php.diff
I just have no idea how to correctly submit this patch. The
information on http://www.horde.org/development/git#createcommit is
not verbose enough for a git newbe. I did my best and hope it is
alright.
Please inform me what I can do better next time.
State ⇒ Duplicate
Priority ⇒ 1. Low
Request #10228.provide more Info?
Which passwd backend are you using? (passwd/config/backends.local.php)
Which Driver is used for Horde_Auth? (horde/config/conf.php)
Priority ⇒ 3. High
State ⇒ Unconfirmed
Patch ⇒ No
Milestone ⇒
Queue ⇒ Passwd
Summary ⇒ Successful password change leads to infinite loading of site
Type ⇒ Bug
infinitly try to load the page. Even logout results in this behavior.
The same
with a page reload or manually entering the url.
Only after completly closing the browser and reopening it shows the
login screen again. Using the new password I can log in again.
No possibility to reset credentials in applications is provided by the
Horde Framework (
Enhancement #10228), so as a workaround passwd needsto log out the user at the moment.