[phpldapadmin] [ phpldapadmin-Bugs-3004012 ] password sync for sambaSamAccount template broken.

"SourceForge.net" <[email protected]> Wed, 19 May 2010 11:35:29 +0000
Newsgroups gmane.comp.ldap.davedap
Message-ID <[email protected]>
Bugs item #3004012, was opened at 2010-05-19 13:35
Message generated for change (Tracker Item Submitted) made by ofreyd69
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3004012&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: ofreyd (ofreyd69)
Assigned to: Nobody/Anonymous (nobody)
Summary: password sync for sambaSamAccount template broken.

Initial Comment:
phpldapadmin  1.2.0.5-1
slapd  2.4.11-1+lenny1
apache2 2.2.9-10+lenny7
php5  5.2.6.dfsg.1-1+lenny8
samba 3.4.7
debian lenny

I use phpldapadmin on a samba server. The sambaSamAccount.xml template autoFills the sambaLMPassword, sambaNTpassword 
when the userPassword is changed. This results in a broken sambaNTpassword hash, and the user in question can't login.
If I edit the sambaNTpassword directly, it works, I get the same hash that smbldap-passwd calculates. 

BTW, the sambaNTPassword entry is always shown as "changed", and every time I say "update", I get another hash (password update loop).
Of course these hashes do not correspond to the original password.
It seems the <post> command generates an <onchange> event, so that the encrypted userPassword is again encrypted to an LM
and NT password hash, instead of putting the same clear-text password into the different hash functions.






----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=3004012&group_id=61828

------------------------------------------------------------------------------

______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/