| Summary | startTLS in pear/Horde/Ldap.php is incorrect |
| Queue | Horde Framework Packages |
| Queue Version | Git master |
| Type | Bug |
| State | Resolved |
| Priority | 1. Low |
| Owners | jan (at) horde (dot) org |
| Requester | landsidel.allen (at) gmail (dot) com |
| Created | 04/04/2013 (4487 days ago) |
| Due | |
| Updated | 12/17/2013 (4230 days ago) |
| Assigned | |
| Resolved | 10/17/2013 (4291 days ago) |
| Github Issue Link | |
| Github Pull Request | |
| Milestone | |
| Patch | No |
commit e5bba307fc81aceeb8f7f6186744e135e53c84fd
Author: Jan Schneider <jan@horde.org>
Date: Thu Oct 17 14:51:42 2013 +0200
[jan] Try starting TLS without querying the rootDSE (
Bug #12157).framework/Ldap/lib/Horde/Ldap.php | 21 ++++++++++++++-------
framework/Ldap/package.xml | 4 ++--
2 files changed, 16 insertions(+), 9 deletions(-)
http://git.horde.org/horde-git/-/commit/e5bba307fc81aceeb8f7f6186744e135e53c84fd
State ⇒ Resolved
Priority ⇒ 1. Low
commit 30df4a615b10d1edfea3faa4cccf39ae85b757ae
Author: Jan Schneider <jan@horde.org>
Date: Thu Oct 17 14:51:42 2013 +0200
[jan] Try starting TLS without querying the rootDSE (
Bug #12157).framework/Ldap/lib/Horde/Ldap.php | 21 ++++++++++++++-------
framework/Ldap/package.xml | 4 ++--
2 files changed, 16 insertions(+), 9 deletions(-)
http://git.horde.org/horde-git/-/commit/30df4a615b10d1edfea3faa4cccf39ae85b757ae
New Attachment: Ldap.php.patch
Priority ⇒ 2. Medium
Type ⇒ Bug
Summary ⇒ startTLS in pear/Horde/Ldap.php is incorrect
Queue ⇒ Horde Framework Packages
Milestone ⇒
Patch ⇒ No
State ⇒ Unconfirmed
rootDSE to see if TLS is supported, when TLS is enabled in the horde
configuration for LDAP.
When TLS is required by the LDAP server, this check fails because the
connection is not yet TLS enabled due to ldap_start_tls() not having
yet been called.
Simple solution:
Remove the rootDSE check. Commenting all lines in startTLS() up to
the ldap_start_tls() command fixes the issue.
More complex solution:
Try ldap_start_tls() first, and if that fails, attempt to fetch the
rootDSE to see if it reports as being supported.