Re: passwd question

Craig White <[email protected]>
Newsgroups gmane.comp.horde.sork
Message-ID <[email protected]>
On Thu, 2008-06-19 at 13:30 -0700, Craig White wrote:
> For the first time, I downloaded installed Passwd (3.0.1 I think it is -
> and latest Horde Release 3.2.1)
> 
> I commented all items of backends.php out except for smbldap and
> configured it to work as I would expect.
> 
> I chose the smbldap because I would like it to change userPassword,
> sambaLMPassword, sambaNTPassword attributes (the sambaLMPassword is
> probably unnecessary but anyway)...
> 
> I gave it my old and new passwords and I get this message on screen...
> 
> Failure in changing password on Samba/LDAP Server: Insufficient access
> 
> but all three passwords (userPassword, sambaLMPassword and
> sambaNTPassword) seemed to have changed anyway.
> 
> This is the ACL I'm using in LDAP...does this pose a problem?
> 
> access to attrs=userPassword,sambaNTPassword,sambaLMPassword
>         by dn.exact="uid=admin,ou=People,dc=example,dc=com" write
>         by self write
>         by anonymous auth
>         by * none
> 
> I've been using this ACL for a pretty long time in a number of
> locations...
----
I almost suspect that this occurs because of a note in backends.php...

// NOTE: to set the ldap userdn, see horde/config/hooks.php

but I don't see anything specifically in hooks.php that refers to the
userdn at all and I do have some hooks that get the cn and mail
attributes.

So I am using the 'realm' attribute to provide the rest of the $userdn
and I suspect that this is why I am getting the error - even though it
actually changes all the passwords.

If in fact, I grep for userdn in horde/config/hooks.php.dist, I get
nothing at all.

Should I write some kind of custom hook to return the actual userdn?
Does something like this already exist?

Craig

-- 
Sork mailing list - Join the hunt: http://horde.org/bounties/#sork
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.