This was the patch and rationale behind that change: 
http://lists.horde.org/archives/sork/Week-of-Mon-20040503/001579.html



I reverted it to the former behaviour because that made more sense to me.

maybe not just remove the anonymous bind, but rather remove the 
fallbacking method, ie if there's no configuration on $userdn try only 
anon-bind, and if $userdn set, try only anonymous bind.



if (!is_null($userdn)) {

   // do non-anonymous bind

} else {

   // do anonymous bind

}



then i think it will work as expected:

1. bind with root user

2. bind with current user

3. anonymous bind



and no hidden catches.

Okay, I understand you now. It seems odd to me to try updating 
passwords anonymously, but I'm wary of removing functionality that 
people need. Please poll the sork list on this.

if you go change the password, and fill wrong "old password" the ldap 
driver will fallback to the anonymous bind, due bind with password 
failed.





[Fri Sep  9 01:55:20 2005] [error] PHP Warning:  ldap_bind(): Unable 
to bind to server: Invalid credentials in 
/usr/share/horde/passwd/lib/Driver/ldap.php on line 87

[Fri Sep  9 01:55:20 2005] [error] PHP Warning:  ldap_mod_replace(): 
Modify: Strong(er) authentication required in 
/usr/share/horde/passwd/lib/Driver/ldap.php on line 282





             // Try to bind as the current userdn with password.

             if (!is_null($userdn)) {                                   
                                                                       
   $result = @ldap_bind($this->_ds, $userdn, $password);

             }

             // If unable to bind as current user, still try to bind as

             // guest.

             if (!$result) {

                 $result = @ldap_bind($this->_ds);

             }









removing the second rebind, the proper error is produced:

" Failure in changing password on delfi.ee domain: Incorrect Password"

I'm sorry, I can't follow what the problem is. What do you think 
should be changed? Can you upload a patch?

i've configured smbldap and hooks to bind to DN of user.

when user fills wrong old password the driver will try to bind 
anonymous LDAP user and further modification operation will fail as 
there aren't sufficent permissions to update LDAP.



error returned is:

Failure in changing password on delfi.ee domain: Strong(er) 
authentication required