#45477 [Bgs]: ldap_mod_del() fails to remove attribute

 ID:               45477
 User updated by:  alexis dot robert at gmail dot com
 Reported By:      alexis dot robert at gmail dot com
 Status:           Bogus
 Bug Type:         LDAP related
 Operating System: *
 PHP Version:      5.2.6
 New Comment:

I've done a patch which fixes the bug. It creates a ldap_mod_deleteadd
function which delete an attribute and adding it in the same LDAP
request.

Some parts of the code is imported from pam_ldap.

This bug also appears with MS Active Directory (when you bind without
admin rights).

The syntax is pretty obvious (but not very clean asap, i wanted to know
if you like it before making it as pretty as ldap_mod_replace) :

ldap_mod_deleteadd(resource link, string dn, string attr, string old,
string new[, boolean binary = false])

The boolean binary attribute is here for AD which uses an unicode
encoded password (and so needs LDAP_MOD_BVALUES).

Currently waiting for your insults :)

Alexis

(The patch is at :
http://alexis.robertlan.eu.org/tmp/001-ldap_php-add-mod_deleteadd.diff -
created by cvs diff)


Previous Comments:
------------------------------------------------------------------------

[2008-07-18 11:56:50] alexis dot robert at gmail dot com

OK. I've done a *lot* of researchs (trying to make TLS/SSL work, and
some other fun things -- I hate certificates) and I discovered by
analysing with tcpdump/wireshark that the current Java program make the
delete+add orders in the same request, when my PHP software makes it in
two different requests. So, NDS refuses to let the users have no
userPassword attribute for a short period of time : that is the reason
of the "Server unwilling to perform".

As I don't think we can queue the requests in a FIFO-like stack in
php_ldap's API, is it possible to send a LDIF using php_ldap ? That
sounds to be a great solution.

Thanks a lot

Alexis

------------------------------------------------------------------------

[2008-07-11 15:59:51] alexis dot robert at gmail dot com

I don't have any access to the LDAP server. I'll try to request them on
Tuesday (if I had them, it would be the first thing I would check).

------------------------------------------------------------------------

[2008-07-11 15:17:02] [email protected]

Works -> Bogus.

------------------------------------------------------------------------

[2008-07-11 15:16:34] [email protected]

Well, should you then check in the server logs WHY it doesn't want to
perform?

------------------------------------------------------------------------

[2008-07-11 15:16:29] alexis dot robert at gmail dot com

Hmmm ... you are right. Sorry, it works like this. I thought I have
tested this case.

Now I have a LDAP issue :)

Apologies.

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/45477

-- 
Edit this bug report at http://bugs.php.net/?id=45477&edit=1