Re: Using Horde Passwd module ?

André Schild <[email protected]> Wed, 30 Nov 2005 07:55:06 +0100
Newsgroups	gmane.mail.jamm.user
Message-ID	<[email protected]>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hello Keith,<br>
<br>
thanks for your explanations.<br>
<br>
I now got it working with these settings.<br>
<br>
<br>
// NOTE: to set the ldap userdn, see horde/config/hooks.php<br>
$backends['ldap'] = array(<br>
&nbsp;&nbsp;&nbsp; 'name' =&gt; 'Common LDAP Server',<br>
&nbsp;&nbsp;&nbsp; 'preferred' =&gt; '',<br>
&nbsp;&nbsp;&nbsp; 'password policy' =&gt; array(<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'minLength' =&gt; 6,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'maxLength' =&gt; 18,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'minClasses'=2<br>
&nbsp;&nbsp;&nbsp; ),<br>
&nbsp;&nbsp;&nbsp; 'driver' =&gt; 'ldap',<br>
&nbsp;&nbsp;&nbsp; 'params' =&gt; array(<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'host' =&gt; 'localhost',<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'port' =&gt; 389,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'basedn' =&gt; 'o=hosting2,dc=aarboard,dc=ch',<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'uid' =&gt; 'mail',<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; // this will be appended to the username when looking for the
userdn.<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'realm' =&gt; '',<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'encryption' =&gt; 'crypt',<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; // make sure the host == cn in the server certificate<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 'tls' =&gt; false<br>
&nbsp;&nbsp;&nbsp; )<br>
);<br>
<br>
<br>
Thanks for helping.<br>
<br>
Andr&eacute;<br>
<br>
Keith T. Garner wrote:
<blockquote cite="[email protected]"
 type="cite">
  <pre wrap="">On Mon, Nov 28, 2005 at 11:52:55, Andre Schild said:
  </pre>
  <blockquote type="cite">
    <pre wrap="">In the password managment module of horde you
have to specify either a ldap login with the 
user who is changing his password (Must of course have
password change ACL allowed) or via the
admin login.
    </pre>
  </blockquote>
  <pre wrap=""><!---->
The user has the ACL to allow them to change their own password, so
that should be okay.

I've made some comments in the ldap userdn stuff below.  That's
probably your better way to go if possible.

  </pre>
  <blockquote type="cite">
    <pre wrap="">// NOTE: to set the ldap userdn, see horde/config/hooks.php
$backends['ldap'] = array(
    'name' =&gt; 'Example LDAP Server',
    'preferred' =&gt; '<a class="moz-txt-link-abbreviated" href="http://www.example.com">www.example.com</a>',
    'password policy' =&gt; array(
        'minLength' =&gt; 3,
        'maxLength' =&gt; 8
    </pre>
  </blockquote>
  <pre wrap=""><!---->
I think you can make safely make this larger than 8.  In fact, I'd
make it much longer.

  </pre>
  <blockquote type="cite">
    <pre wrap="">    ),
    'driver' =&gt; 'ldap',
    'params' =&gt; array(
        'host' =&gt; 'localhost',
        'port' =&gt; 389,
        'basedn' =&gt; 'o=hosting,dn=aarboard,dn=ch',
        'uid' =&gt; 'mail',
        // this will be appended to the username when looking for the
userdn.
    </pre>
  </blockquote>
  <pre wrap=""><!---->
Given the above 4 settings, assuming that horde does a deep search
instead of a single level search, you should be okay.  It'd be
interesting to see the code for how horde is issuing the LDAP query.

  </pre>
  <blockquote type="cite">
    <pre wrap="">        'realm' =&gt; '',
        'encryption' =&gt; 'crypt',
    </pre>
  </blockquote>
  <pre wrap=""><!---->
This is probably part of the problem.  You probably want something
other than crypt if Horde supports it.

  </pre>
  <blockquote type="cite">
    <pre wrap="">        // make sure the host == cn in the server certificate
        'tls' =&gt; false
    )
);
    </pre>
  </blockquote>
  <pre wrap=""><!---->
Keith

  </pre>
</blockquote>
<br>
</body>
</html>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click