Skip to Content.
Sympa Menu

en - Re: [sympa-users] Configuring LDAP

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Olivier Salaün - CRU <address@concealed>
  • To: Sam Lalonde <address@concealed>
  • Cc: address@concealed
  • Subject: Re: [sympa-users] Configuring LDAP
  • Date: Wed, 04 May 2005 14:44:49 +0200

Hi Sam,

Sympa 5.x is able to perform an LDAP-based authentication given the user's UID and password.
We recently introduced some sanity checks in wwsympa that seems to disallow uid to be entered in the 'email' form field.

Attached is a patch that extends the allowed format for this field and should fix your problem.
(it has also been updated in our CVS tree)

Thanks for reporting this.

Sam Lalonde wrote:

In sympa users log in with an email address, however our LDAP server needs to receive "usernames" in order to do authentication. The username is simply the username portion of the email address. In older versions of Sympa I just re-wrote the pages so they were labelled to supply a username instead of a password and it worked, but now with version 5.01a I cannot submit usernames because something in Sympa is realizing that it is not an email address and it is not sending. My auth.conf entry is as follows:

ldap
host directory.mydomain.ca:389
timeout 20
suffix ou=People,o=mydomain.ca
get_dn_by_uid_filter (uid=[sender])
get_dn_by_email (mail=[sender])
email_attribute mail
scope sub

I would like to do one of the following:

1 (preferred) - If possible, configure auth.conf so that it knows to send the first part of the email address so that it will authenticate properly.

2 - Hack the sympa pages so that it asks for username instead of email address. (This is harder on v 5 than it was on v 4.)


*** src/tools.pl	4 May 2005 12:08:05 -0000	1.159
--- src/tools.pl	4 May 2005 12:37:37 -0000
***************
*** 50,56 ****
  	   'sql_query' => '(SELECT|select).*',
  	   'scenario' => '[\w,\.\-]+',
  	   'task' => '\w+',
! 	   'datasource' => '[\w-]+'
  	   );
  
  my %openssl_errors = (1 => 'an error occurred parsing the command options',
--- 50,57 ----
  	   'sql_query' => '(SELECT|select).*',
  	   'scenario' => '[\w,\.\-]+',
  	   'task' => '\w+',
! 	   'datasource' => '[\w-]+',
! 	   'uid' => '[\w\-\.\+]+',
  	   );
  
  my %openssl_errors = (1 => 'an error occurred parsing the command options',
*** wwsympa/wwsympa.fcgi	3 May 2005 10:08:24 -0000	1.527
--- wwsympa/wwsympa.fcgi	4 May 2005 12:37:37 -0000
***************
*** 471,477 ****
  		 'family_name' => $tools::regexp{'family_name'},
  
  		 ## Email addresses
! 		 'email' => $tools::regexp{'email'},
  		 'init_email' => $tools::regexp{'email'},
  		 'new_alternative_email' => $tools::regexp{'email'},
  		 'new_email' => $tools::regexp{'email'},
--- 471,477 ----
  		 'family_name' => $tools::regexp{'family_name'},
  
  		 ## Email addresses
! 		 'email' => $tools::regexp{'email'}.'|'.$tools::regexp{'uid'},
  		 'init_email' => $tools::regexp{'email'},
  		 'new_alternative_email' => $tools::regexp{'email'},
  		 'new_email' => $tools::regexp{'email'},

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature




Archive powered by MHonArc 2.6.19+.

Top of Page