<?xml version="1.0" encoding="UTF-8"?> 
<?xml-stylesheet href="https://dev.horde.org/themes/horde//default/feed-rss.xsl" type="text/xsl"?> 
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
 <channel> 
  <title>LDAP Preferences - Wrong bind DN</title> 
  <pubDate>Fri, 10 Apr 2026 15:00:34 +0000</pubDate> 
  <link>https://bugs.horde.org/ticket/1786</link> 
  <atom:link rel="self" type="application/rss+xml" title="LDAP Preferences - Wrong bind DN" href="https://bugs.horde.org/ticket/1786/rss" /> 
  <description>LDAP Preferences - Wrong bind DN</description> 
 
   
   
  <item> 
   <title>I am using the LDAP-Preferences System

The users in the LDA</title> 
   <description>I am using the LDAP-Preferences System

The users in the LDAP-tree are organized hierarchicaly in different organizational units.

When binding to the LDAP-server we have to determine the user&#039;s full DN.

In the current code (/horde/lib/Horde/Prefs/ldap.php v1.85.10.4) the bind DN is hardcoded like this:

    $bind_dn = sprintf(&#039;%s=%s,%s&#039;, $this-&gt;_params[&#039;uid&#039;][0],

                                   $this-&gt;_params[&#039;username&#039;],

                                   $this-&gt;_params[&#039;basedn&#039;]);



In our opinion it would be more advantageous to use the code attached, to avoid this hardcoding.

</description> 
   <pubDate>Wed, 13 Apr 2005 16:51:01 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/1786#t7277</link> 
  </item> 
   
  <item> 
   <title>Here&#039;s my proposed solution to this problem:



Horde&#039;s Pref</title> 
   <description>Here&#039;s my proposed solution to this problem:



Horde&#039;s Prefs ldap driver requires either

    A) a root DN and password to search for and modify a user&#039;s prefs 

fields, or

    B) a simple-to-concatenate user DN formula (such 

$conf[&#039;prefs&#039;][&#039;params&#039;][&#039;uid&#039;] + a $base_dn)



A) is a problem because root binds to an LDAP server are neither 

necessary nor desired to do most any user-level write operations.

B) is a problem because my (like the original poster&#039;s) person schema does not conform to such a simplistic formula. DNs look like this:



    ueid=84kjasd99,ou=8,ou=people,dc=enc,dc=edu



The solution is to make the Prefs ldap driver behave like most LDAP apps 

that need to do write operations: do an anonymous bind, search for the 

entry to modify using a filter, then rebind as the DN of that entry and 

do the write.



This is a config issue, and horde admins should be aware of the option. To this end, I added an option under LDAP-config Preferences in conf.xml.</description> 
   <pubDate>Mon, 18 Apr 2005 18:52:49 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/1786#t7412</link> 
  </item> 
   
  <item> 
   <title>...and here&#039;s the second patch!</title> 
   <description>...and here&#039;s the second patch!</description> 
   <pubDate>Mon, 18 Apr 2005 18:53:41 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/1786#t7413</link> 
  </item> 
   
  <item> 
   <title>Ben - patches look good and clean, I&#039;ve committed them and t</title> 
   <description>Ben - patches look good and clean, I&#039;ve committed them and they&#039;ll be in Horde 3.1. Thanks!</description> 
   <pubDate>Wed, 01 Jun 2005 05:29:38 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/1786#t8753</link> 
  </item> 
   
   
 
 </channel> 
</rss> 
