View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0013550 | mantisbt | ldap | public | 2011-11-23 04:23 | 2012-06-24 10:12 |
| Reporter | Lapinkiller | Assigned To | rombert | ||
| Priority | low | Severity | major | Reproducibility | always |
| Status | closed | Resolution | no change required | ||
| Product Version | 1.2.8 | ||||
| Summary | 0013550: c cedilla in active directory password | ||||
| Description | Hello, If a Active Directory User have a character like ç (c cedilla) in his password, he can't logon to Mantis... I had same problem on one of my php applications and i resolved it with a utf8_decode on the password... but it doesn't work with Mantis... My AD admin said me passwords in the AD use charset UTF-16LE, so i tried with mb_convert_encoding, but doesn't work too... | ||||
| Steps To Reproduce | I used AD test account : tested with Firefox 8 on Win7 64b - French | ||||
| Tags | No tags attached. | ||||
| Attached Files | |||||
|
teste |
|
|
please, is it possible to have a feedback ? |
|
|
Can you enable LOG_LDAP output ( see http://www.mantisbt.org/docs/master-1.2.x/en/administration_guide.html#ADMIN.CONFIG.LOGGING ) and attach the log here? The property might not yet be visible in the guide, I just pushed an updated, but everything else should work just fine. |
|
|
No more informations in log : 28-12-2011 09:04 CET ldap Binding to LDAP server |
|
|
I created a test user with the login and password you specified on OpenLDAP but was unable to reproduce. So the problem is linked to AD specifically. Digging further, it seems that a user is found ( the Checking... log entry is from core/ldap_api.php:380 ) but the bind does not succeed. Could you test the attached patch and let me know if any specific errors are reported now in the LDAP log? ldapapiphp-log-last-LDAP-error-if-ldapbind-fails.patch (603 bytes)
From fa2647a385489bbd2b1abe76a48a42a3ffe9054f Thu, 29 Dec 2011 16:23:54 +0200
From: Robert Munteanu <robert@lmn.ro>
Date: Thu, 29 Dec 2011 16:22:46 +0200
Subject: [PATCH] ldap_api.php: log last LDAP error if ldap_bind fails
Affects bug #13550: c cedilla in active directory password
diff --git a/core/ldap_api.php b/core/ldap_api.php
index 4d3cc2f..afa2516 100644
--- a/core/ldap_api.php
+++ b/core/ldap_api.php
@@ -383,6 +383,8 @@
if ( @ldap_bind( $t_ds, $t_dn, $p_password ) ) {
$t_authenticated = true;
break;
+ } else {
+ ldap_log_error( $t_ds );
}
}
} else { |
|
|
now it works O____o (without your patch) maybe the have changed somethings on the AD (Microsoft AD 2003) else i don't understand... i will try to contact the admins about changes on AD... i know they will migrate AD to 2008 soon... EDIT : i had the same problem on Dokuwiki and now it works too :D |
|
|
Thanks for the follow-up. I'll set this on feedback and wait for more input from you. At any rate, the patch will be useful for debugging if you need it. |
|
|
No feedback for 5 months, so closing. |
|