[bug #22811] bad id2name in accounts_ldap causes bad group memberships

Follow-up Comment #1, bug #22811 (project phpgroupware):

It should be using id2lid, not id2name which returns the cn.  It is basic
security that in general other users shouldn't be shown the login ids of other
users in potentially hostile environments.

I the resight tree a lot of this stuff has already changed.  I think there
should be a discussion on the dev list about if this should be fixed now in
the phpgw trunk or wait for a sync from resight.

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?22811>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/