Tickets :: [#2708] crypted password in LDAP tree

6.0.0-beta1

7/26/25

Ticket 2199 was not found.

Summary	crypted password in LDAP tree
Queue	Passwd
Queue Version	HEAD
Type	Bug
State	Resolved
Priority	2. Medium
Owners	Horde Developers (at)
Requester	bjoern.koester (at) mediata (dot) net
Created	09/29/2005 (7240 days ago)
Due
Updated	07/17/2006 (6949 days ago)
Assigned	04/24/2006 (7033 days ago)
Resolved	07/17/2006 (6949 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	Yes

07/17/2006 09:22:52 AM	Jan Schneider	Comment #19 Version ⇒ HEAD Queue ⇒ Passwd State ⇒ Resolved	Reply to this comment
Committed, thanks.

04/25/2006 07:39:31 AM	bjoern (dot) koester (at) mediata (dot) net	Comment #18	Reply to this comment
Looks good to me. This works fine for me too. Björn

04/24/2006 09:29:03 PM	Jan Schneider	Comment #17 State ⇒ Assigned	Reply to this comment
Looks good to me.

04/24/2006 07:56:46 PM	Chuck Hagenbuch	Comment #16 State ⇒ Feedback	Reply to this comment
Looks okay to me, and I like it better than the old one since it stays local to passwd. Jan, what do you think?

04/24/2006 07:56:16 PM	Chuck Hagenbuch	Deleted Original Message

04/24/2006 07:08:39 PM	andreas (at) altroot (dot) de	Comment #15 New Attachment: Driver.php.diff	Reply to this comment
Here's the patch. It got lost since I entered the wrong spam protection code.

04/24/2006 07:06:55 PM	andreas (at) altroot (dot) de	Comment #14	Reply to this comment
I use the attached patch for passwd/lib/Driver.php to fix the problem with {CRYPT} and {crypt} mismatches when comparing password hashes. If show_encryption is set, the encryption types that are prepended to the password hashes are converted to uppercase before the strings are compared.

12/28/2005 01:11:00 PM	Jan Schneider	Comment #13 State ⇒ Stalled	Reply to this comment
Fine. I'll set the ticket to Stalled until then.

12/28/2005 01:04:18 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #12	Reply to this comment
Yes, please stay tuned. I am currently on vacation an in the begining of january there are two projects which have to be done, so i will be able to work on on a correct patch at the end of january. ok?

12/27/2005 12:05:50 PM	Jan Schneider	Comment #11	Reply to this comment
Are you still working on a correct patch?

10/18/2005 02:03:31 PM	Jan Schneider	Comment #10	Reply to this comment
This breaks the opposite case where the prefix is lowercase. A bad trade-off.

10/18/2005 01:41:56 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #9 New Attachment: Auth.php.diff	Reply to this comment
Attached my diff-file

10/09/2005 01:57:38 PM	Jan Schneider	Comment #8 Version ⇒ HEAD Queue ⇒ Horde Framework Packages	Reply to this comment
This is not a Passwd problem in any case.

10/04/2005 04:57:54 PM	Chuck Hagenbuch	Comment #7	Reply to this comment
Please don't attach whole files. Do a diff.

10/04/2005 04:57:16 PM	Chuck Hagenbuch	Deleted Original Message

10/04/2005 03:58:34 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #6 New Attachment: Auth.php	Reply to this comment
Hi, attached you will find the Auth.php file that works fine for me Greetings Björn

10/04/2005 03:55:40 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #5	Reply to this comment
Hi, for me it does not work. I get the message for password mismatch as before I've updated Auth.php to be case-insensitive when looking for {crypt} in getSalt(), but I'm not sure whether or not this will help. Can someone with this environment test it? Here's the patch: http://cvs.horde.org/diff.php/framework/Auth/Auth.php?r1=1.158&r2=1.159&ty=u

10/04/2005 03:00:08 PM	Chuck Hagenbuch	Comment #4 State ⇒ Feedback	Reply to this comment
I've updated Auth.php to be case-insensitive when looking for {crypt} in getSalt(), but I'm not sure whether or not this will help. Can someone with this environment test it? Here's the patch: http://cvs.horde.org/diff.php/framework/Auth/Auth.php?r1=1.158&r2=1.159&ty=u

10/03/2005 11:42:59 PM	Matt Selsky	Comment #3	Reply to this comment
RFC 2307 uses "{crypt}", but the OpenLDAP code/documentation seems to use "{CRYPT}".

10/02/2005 05:33:49 PM	Jan Schneider	Comment #2 Assigned to Horde Developers State ⇒ Assigned	Reply to this comment
We probably should check for both, the lowercase and uppercase crypt method name.

09/29/2005 03:31:03 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #1 Priority ⇒ 2. Medium State ⇒ Unconfirmed Queue ⇒ Passwd Type ⇒ Bug Summary ⇒ crypted password in LDAP tree	Reply to this comment
Hi, i got a lot of trouble changing my crypted passwords in my ldap tree. I always got the "Incorrect Password" message for my old password. i started to find out why my old password does not match. In the horde auth class i found the letters "{crypt}" in lower cases. im my ldap the these letter are all in upper cases eg {CRYPT}. After changing this spelling the the horde auth class ist works fine. Greetings Björn