Re: Using Horde Passwd module ?

On Mon, Nov 28, 2005 at 11:52:55, Andre Schild said:
> In the password managment module of horde you
> have to specify either a ldap login with the 
> user who is changing his password (Must of course have
> password change ACL allowed) or via the
> admin login.

The user has the ACL to allow them to change their own password, so
that should be okay.

I've made some comments in the ldap userdn stuff below.  That's
probably your better way to go if possible.

> // NOTE: to set the ldap userdn, see horde/config/hooks.php
> $backends['ldap'] = array(
>     'name' => 'Example LDAP Server',
>     'preferred' => 'www.example.com',
>     'password policy' => array(
>         'minLength' => 3,
>         'maxLength' => 8

I think you can make safely make this larger than 8.  In fact, I'd
make it much longer.

>     ),
>     'driver' => 'ldap',
>     'params' => array(
>         'host' => 'localhost',
>         'port' => 389,
>         'basedn' => 'o=hosting,dn=aarboard,dn=ch',
>         'uid' => 'mail',
>         // this will be appended to the username when looking for the
> userdn.

Given the above 4 settings, assuming that horde does a deep search
instead of a single level search, you should be okay.  It'd be
interesting to see the code for how horde is issuing the LDAP query.

>         'realm' => '',
>         'encryption' => 'crypt',

This is probably part of the problem.  You probably want something
other than crypt if Horde supports it.

>         // make sure the host == cn in the server certificate
>         'tls' => false
>     )
> );

Keith

-- 
 Keith T. Garner                                        [email protected]
                "Make no little plans; they have no magic to
                   stir men's blood." - Daniel H. Burnham


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click