Tickets :: [#2708] crypted password in LDAP tree

6.0.0-beta1

11/8/25

Summary	crypted password in LDAP tree
Queue	Passwd
Queue Version	HEAD
Type	Bug
State	Resolved
Priority	2. Medium
Owners	Horde Developers (at)
Requester	bjoern.koester (at) mediata (dot) net
Created	09/29/2005 (7345 days ago)
Due
Updated	07/17/2006 (7054 days ago)
Assigned	04/24/2006 (7138 days ago)
Resolved	07/17/2006 (7054 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch	Yes

07/17/2006 09:22:52 AM	Jan Schneider	Comment #19 Version ⇒ HEAD Queue ⇒ Passwd State ⇒ Resolved	Reply to this comment
Committed, thanks.

04/25/2006 07:39:31 AM	bjoern (dot) koester (at) mediata (dot) net	Comment #18	Reply to this comment
Looks good to me. This works fine for me too. Björn

04/24/2006 09:29:03 PM	Jan Schneider	Comment #17 State ⇒ Assigned	Reply to this comment
Looks good to me.

04/24/2006 07:56:46 PM	Chuck Hagenbuch	Comment #16 State ⇒ Feedback	Reply to this comment
Looks okay to me, and I like it better than the old one since it stays local to passwd. Jan, what do you think?

04/24/2006 07:56:16 PM	Chuck Hagenbuch	Deleted Original Message

04/24/2006 07:08:39 PM	andreas (at) altroot (dot) de	Comment #15 New Attachment: Driver.php.diff	Reply to this comment
Here's the patch. It got lost since I entered the wrong spam protection code.

04/24/2006 07:06:55 PM	andreas (at) altroot (dot) de	Comment #14	Reply to this comment
I use the attached patch for passwd/lib/Driver.php to fix the problem with {CRYPT} and {crypt} mismatches when comparing password hashes. If show_encryption is set, the encryption types that are prepended to the password hashes are converted to uppercase before the strings are compared.

12/28/2005 01:11:00 PM	Jan Schneider	Comment #13 State ⇒ Stalled	Reply to this comment
Fine. I'll set the ticket to Stalled until then.

12/28/2005 01:04:18 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #12	Reply to this comment
Yes, please stay tuned. I am currently on vacation an in the begining of january there are two projects which have to be done, so i will be able to work on on a correct patch at the end of january. ok?

12/27/2005 12:05:50 PM	Jan Schneider	Comment #11	Reply to this comment
Are you still working on a correct patch?

10/18/2005 02:03:31 PM	Jan Schneider	Comment #10	Reply to this comment
This breaks the opposite case where the prefix is lowercase. A bad trade-off.

10/18/2005 01:41:56 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #9 New Attachment: Auth.php.diff	Reply to this comment
Attached my diff-file

10/09/2005 01:57:38 PM	Jan Schneider	Comment #8 Version ⇒ HEAD Queue ⇒ Horde Framework Packages	Reply to this comment
This is not a Passwd problem in any case.

10/04/2005 04:57:54 PM	Chuck Hagenbuch	Comment #7	Reply to this comment
Please don't attach whole files. Do a diff.

10/04/2005 04:57:16 PM	Chuck Hagenbuch	Deleted Original Message

10/04/2005 03:58:34 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #6 New Attachment: Auth.php	Reply to this comment
Hi, attached you will find the Auth.php file that works fine for me Greetings Björn

10/04/2005 03:55:40 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #5	Reply to this comment
Hi, for me it does not work. I get the message for password mismatch as before I've updated Auth.php to be case-insensitive when looking for {crypt} in getSalt(), but I'm not sure whether or not this will help. Can someone with this environment test it? Here's the patch: http://cvs.horde.org/diff.php/framework/Auth/Auth.php?r1=1.158&r2=1.159&ty=u

10/04/2005 03:00:08 PM	Chuck Hagenbuch	Comment #4 State ⇒ Feedback	Reply to this comment
I've updated Auth.php to be case-insensitive when looking for {crypt} in getSalt(), but I'm not sure whether or not this will help. Can someone with this environment test it? Here's the patch: http://cvs.horde.org/diff.php/framework/Auth/Auth.php?r1=1.158&r2=1.159&ty=u

10/03/2005 11:42:59 PM	Matt Selsky	Comment #3	Reply to this comment
RFC 2307 uses "{crypt}", but the OpenLDAP code/documentation seems to use "{CRYPT}".

10/02/2005 05:33:49 PM	Jan Schneider	Comment #2 Assigned to Horde Developers State ⇒ Assigned	Reply to this comment
We probably should check for both, the lowercase and uppercase crypt method name.

09/29/2005 03:31:03 PM	bjoern (dot) koester (at) mediata (dot) net	Comment #1 Priority ⇒ 2. Medium State ⇒ Unconfirmed Queue ⇒ Passwd Type ⇒ Bug Summary ⇒ crypted password in LDAP tree	Reply to this comment
Hi, i got a lot of trouble changing my crypted passwords in my ldap tree. I always got the "Incorrect Password" message for my old password. i started to find out why my old password does not match. In the horde auth class i found the letters "{crypt}" in lower cases. im my ldap the these letter are all in upper cases eg {CRYPT}. After changing this spelling the the horde auth class ist works fine. Greetings Björn