RE: Using Horde Passwd module ?

> -----Original Message-----
> From: [email protected]=20
> [mailto:[email protected]] On Behalf Of=20
> Keith T. Garner
> Sent: Friday, November 25, 2005 9:00 PM
> To: [email protected]
> Subject: Re: [Jamm-users] Using Horde Passwd module ?
>=20
>=20
> On Thu, Nov 24, 2005 at 11:50:27, Andre Schild said:
> > Hello,
> >=20
> > since one month the horde/imp has support for changing=20
> passwords on ldap=20
> > servers.
> > I receive always a user-not found error.
> >=20
> > What is the correct config for the LDAP objects managed by jamm ?
>=20
> I guess I'm not getting the question.  In general, the information
> you've used to configure jamm (and postfix and courier) should apply
> to the plugin on horde/imp.
>=20
> Also, Jamm uses the LDAP extended operation to change the password.
> This uses openldap's default encoding to store the password.  I think
> the default is SSHA, so you might need to make sure in case they
> aren't using the extended operation and are doing the encoding
> themselves.  (Most people seem to do the encoding themselves because
> the docs for doing the LDAP extended operation seem to be harder to
> come by than making a salted sha hash.)
>=20

In the password managment module of horde you
have to specify either a ldap login with the=20
user who is changing his password (Must of course have
password change ACL allowed) or via the
admin login.

I did just wonder if someone already had done it with success,
since my first try did not work.

But I will look at it closer myself.


Thanks for the info about extended operations.

Andr=E9


// NOTE: to set the ldap userdn, see horde/config/hooks.php
$backends['ldap'] =3D array(
    'name' =3D> 'Example LDAP Server',
    'preferred' =3D> 'www.example.com',
    'password policy' =3D> array(
        'minLength' =3D> 3,
        'maxLength' =3D> 8
    ),
    'driver' =3D> 'ldap',
    'params' =3D> array(
        'host' =3D> 'localhost',
        'port' =3D> 389,
        'basedn' =3D> 'o=3Dhosting,dn=3Daarboard,dn=3Dch',
        'uid' =3D> 'mail',
        // this will be appended to the username when looking for the
userdn.
        'realm' =3D> '',
        'encryption' =3D> 'crypt',
        // make sure the host =3D=3D cn in the server certificate
        'tls' =3D> false
    )
);

// NOTE: to set the ldap userdn, see horde/config/hooks.php
$backends['ldapadmin'] =3D array(
    'name' =3D> 'Example LDAP Server with Admin Bindings',
    'preferred' =3D> 'www.example.com',
    'password policy' =3D> array(
        'minLength' =3D> 3,
        'maxLength' =3D> 8
    ),
    'driver' =3D> 'ldap',
    'params' =3D> array(
        'host' =3D> 'localhost',
        'port' =3D> 389,
        'basedn' =3D> 'o=3Dexample.com',
        'admindn' =3D> 'cn=3Dadmin,o=3Dexample.com',
        'adminpw' =3D> 'somepassword',
        'uid' =3D> 'uid',
        'attribute' =3D> 'clearPassword',
        // this will be appended to the username when looking for the
userdn.
        'realm' =3D> '',
        'encryption' =3D> 'crypt',
        // make sure the host =3D=3D cn in the server certificate
        'tls' =3D> false
    )
);




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click