Tickets :: [#15030] Login (su) authentication does not work

Summary	Login (su) authentication does not work
Queue	Horde Framework Packages
Type	Bug
State	Resolved
Priority	1. Low
Owners	Horde Developers (at) , ralf.lang (at) ralf-lang (dot) de
Requester	nordmark (at) mech (dot) kth (dot) se
Created	08/08/2020 (1792 days ago)
Due	05/13/2025 (53 days ago)
Updated	05/13/2025 (53 days ago)
Assigned
Resolved	05/13/2025 (53 days ago)
Github Issue Link
Github Pull Request
Milestone	3.0.0
Patch	Yes

05/13/2025 10:29:36 AM	Ralf Lang	Comment #3 Assigned to Ralf Lang Assigned to Horde Developers State ⇒ Resolved Due ⇒ 05/13/2025 Milestone ⇒ 3.0.0	Reply to this comment
Solved in Horde_Auth https://github.com/horde/Auth/releases/tag/v3.0.0alpha8 However, suggestion on validating username input sanity should be picked up in separate issue.

08/08/2020 10:28:51 AM	nordmark (at) mech (dot) kth (dot) se	Comment #2	Reply to this comment
[Show Quoted Text - 9 lines][Hide Quoted Text] After changing line 74 in Login.php from $this->_location to $this->_params['location'] the backend seems to work. On the other hand, running popen() on untrusted input does not seem like a great idea. It may be better to just leave this backend broken.

08/08/2020 09:40:29 AM	nordmark (at) mech (dot) kth (dot) se	Comment #1 Priority ⇒ 1. Low New Attachment: Login.patch Patch ⇒ Yes Milestone ⇒ Summary ⇒ Login (su) authentication does not work Type ⇒ Bug State ⇒ Unconfirmed Queue ⇒ Horde Framework Packages	Reply to this comment
Version: Horde_Auth 2.2.2 After configuring this auth backend, logins do not work, and the logs show the error message "sh: 1: -c: not found". After changing line 74 in Login.php from $this->_location to $this->_params['location'] the backend seems to work. I guess this backend is seldom used.