[Phpgroupware-tracker] [bug #5407] group entries in LDAP are created improperly

[nobody]

=================== BUG #5407: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5407&group_id=509

Changes by: Dave Hall <address@hidden>
Date: Tue 10/28/03 at 19:40 (Australia/Melbourne)

            What     | Removed                   | Added
---------------------------------------------------------------------------
          Resolution | Later                     | None
         Assigned to | alexbsa                   | skwashd
      Dependent Bugs |                           | 6217


------------------ Additional Follow-up Comments ----------------------------
on it



=================== BUG #5407: FULL BUG SNAPSHOT ===================


Submitted by: fugu                    Project: phpGroupWare                 
Submitted on: Fri 09/19/03 at 03:44
Category:  API - Admin                Bug Group:  0.9.16RC1                 
Severity:  5 - Major                  Priority:  Normal                     
Resolution:  None                     Assigned to:  skwashd                 
Status:  Open                         Component Version:  CVS               
Platform Version:  Linux - Debian     Reproducibility:  Every Time          

Summary:  group entries in LDAP are created improperly

Original Submission:  Groups created by phpgw in LDAP are assigned their 
attributes ahead of their objectclasses. for example: 



dn: cn=Default,o=yourbasednhere

userPassword: 

cn: Default

description: phpgw-created group

phpgwAccountType: g

phpgwAccountExpires: -1

gidNumber: 4

objectClass: top

objectClass: posixGroup

objectClass: phpgwAccount



to my knowledge all objects *have* to be defined ahead of the attributes and 
after the DN entry.. 



this causes gq (the xfree ldap editor) to crash outright when attempting to 
browse entries created with phpgw. 



additionally, this may be the reason that users can only log in one time to a 
new installation using ldap auth + ldap account storage or ldap auth + sql 
account storage. 



with a new installation, using the auth/acct store described above, a user 
designated as admin in the setup can login to groupware one time (the 1st time, 
post install) and everything works fine, however upon ending the session all 
subsequent login attempts and or valid users are denied entrance to phpgw. I 
think that this is the result of group assignments being broken as described 
above. per /phpgwapi/inc/class.accounts_ldap.inc.php any failure results in 
denial of access.. 





--hope this helps





Follow-up Comments
*******************

-------------------------------------------------------
Date: Tue 10/28/03 at 19:40         By: skwashd
on it


CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=5407&group_id=509

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/