Thu, 08 Jan 2009 14:39:32 -0500 http://bugs.horde.org/ticket/2708 crypted password in LDAP tree Hi, i got a lot of trouble changing my crypted passwords in my ldap tree. I always got the "Incorrect Password" message for my old password. i started to find out why my old password does not match. In the horde auth class i found the letters "{crypt}" in lower cases. im my ldap the these letter are all in upper cases eg {CRYPT}. After changing this spelling the the horde auth class ist works fine. Greetings Björn Thu, 29 Sep 2005 11:31:03 -0400 http://bugs.horde.org/ticket/2708#t11991 We probably should check for both, the lowercase and uppercase crypt method name. Sun, 02 Oct 2005 13:33:49 -0400 http://bugs.horde.org/ticket/2708#t12085 RFC 2307 uses "{crypt}", but the OpenLDAP code/documentation seems to use "{CRYPT}". Mon, 03 Oct 2005 19:42:59 -0400 http://bugs.horde.org/ticket/2708#t12113 I've updated Auth.php to be case-insensitive when looking for {crypt} in getSalt(), but I'm not sure whether or not this will help. Can someone with this environment test it? Here's the patch: http://cvs.horde.org/diff.php/framework/Auth/Auth.php?r1=1.158&r2=1.159&ty=u Tue, 04 Oct 2005 11:00:08 -0400 http://bugs.horde.org/ticket/2708#t12146 Hi, for me it does not work. I get the message for password mismatch as before > I've updated Auth.php to be case-insensitive when looking for {crypt} > in getSalt(), but I'm not sure whether or not this will help. Can > someone with this environment test it? > > Here's the patch: > http://cvs.horde.org/diff.php/framework/Auth/Auth.php?r1=1.158&r2=1.159&ty=u Tue, 04 Oct 2005 11:55:40 -0400 http://bugs.horde.org/ticket/2708#t12150 Hi, attached you will find the Auth.php file that works fine for me Greetings Björn Tue, 04 Oct 2005 11:58:34 -0400 http://bugs.horde.org/ticket/2708#t12151 Please don't attach whole files. Do a diff. Tue, 04 Oct 2005 12:57:54 -0400 http://bugs.horde.org/ticket/2708#t12154 This is not a Passwd problem in any case. Sun, 09 Oct 2005 09:57:38 -0400 http://bugs.horde.org/ticket/2708#t12279 Attached my diff-file Tue, 18 Oct 2005 09:41:56 -0400 http://bugs.horde.org/ticket/2708#t12538 This breaks the opposite case where the prefix is lowercase. A bad trade-off. Tue, 18 Oct 2005 10:03:31 -0400 http://bugs.horde.org/ticket/2708#t12541 Are you still working on a correct patch? Tue, 27 Dec 2005 07:05:50 -0500 http://bugs.horde.org/ticket/2708#t15106 Yes, please stay tuned. I am currently on vacation an in the begining of january there are two projects which have to be done, so i will be able to work on on a correct patch at the end of january. ok? Wed, 28 Dec 2005 08:04:18 -0500 http://bugs.horde.org/ticket/2708#t15198 Fine. I'll set the ticket to Stalled until then. Wed, 28 Dec 2005 08:11:00 -0500 http://bugs.horde.org/ticket/2708#t15200 I use the attached patch for passwd/lib/Driver.php to fix the problem with {CRYPT} and {crypt} mismatches when comparing password hashes. If show_encryption is set, the encryption types that are prepended to the password hashes are converted to uppercase before the strings are compared. Mon, 24 Apr 2006 15:06:55 -0400 http://bugs.horde.org/ticket/2708#t19413 Here's the patch. It got lost since I entered the wrong spam protection code. Mon, 24 Apr 2006 15:08:39 -0400 http://bugs.horde.org/ticket/2708#t19414 Looks okay to me, and I like it better than the old one since it stays local to passwd. Jan, what do you think? Mon, 24 Apr 2006 15:56:46 -0400 http://bugs.horde.org/ticket/2708#t19421 Looks good to me. Mon, 24 Apr 2006 17:29:03 -0400 http://bugs.horde.org/ticket/2708#t19426 > Looks good to me. This works fine for me too. Björn Tue, 25 Apr 2006 03:39:31 -0400 http://bugs.horde.org/ticket/2708#t19443 Committed, thanks. Mon, 17 Jul 2006 05:22:52 -0400 http://bugs.horde.org/ticket/2708#t22046