Skip to Content.
Sympa Menu

en - Re: [sympa-users] LDAP authentication "bugfix" in 6.1

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: David Verdin <address@concealed>
  • To: address@concealed
  • Subject: Re: [sympa-users] LDAP authentication "bugfix" in 6.1
  • Date: Mon, 15 Nov 2010 11:28:19 +0100

Dear all,

This problem has been fixed, along with other previously reported problems, in the - just tagged - newest version of Sympa 6.1 : The 6.1.3.
You can download it here: http://www.sympa.org/distribution/sympa-6.1.3.tar.gz
You can also check the release notes for more details on the 6.1.3: http://www.sympa.org/distribution/latest-stable/NEWS

Thanks for using Sympa and help us improve it!

Regards,

The Sympa authors

Le 08/11/2010 16:22, Niklas Matthies a écrit :
address@concealed">
The "bugfix"[1] from Revision 6168 breaks our use case.

Our users have two email addresses, a long one (e.g.
address@concealed) and a short one (e.g. address@concealed,
effectively an alias). While everyone uses the short address when
typing their (or other people's) email address somewhere, the long one
is actually the canonical address, in particular it is the address
automatically inserted into the From header field when users send mail
going outside of MS Exchange.

For this reason the long email address is the one to be used when
subscribing to a Sympa mailing list. Subscribing with the short email
address wouldn't work for posting to a non-public list because the
messages always appear to come from the long email address wouldn't be
matched up with the subscription.

We use the LDAP lookup to canonicalize the login to the long
(= canonical) email address so that users login to the same account
regardless of which email address they enter.

(In our auth.conf we have:

    get_dn_by_email_filter (|(mail=[sender])(userPrincipalName=[sender]))
    email_attribute        mail

Here "mail" is the long email address while "userPrincipalName" is the
short email address.)

The "bugfix" causes this canonicalization to not work anymore. Users
are now logged in to different accounts depending on whether they
enter their long email address or the short alias address.

I guess this is something that should be configurable in Sympa. (At
least until there is true support for Sympa accounts to have multiple
email addresses.)

-- Niklas Matthies

[1] [bug][Submitted by M. Warkus, univ. Marburg] When a user logged
in, using LDAP, by providing an email address, if this email was not
the first one in the LDAP email attribute, then the uiser was not
logged with the address she provided but with the default address
found in the LDAP directory. Now, if an email is provided and the
login is successful ,the user is logged in with the email she
provided.

  

--
David Verdin
Comité réseau des universités

Due to the limitations of human brain, I fail to remember all the mails.
So if you want your bug reports or feature requests for Sympa to be processed, please post them to the Sympa tracker



Archive powered by MHonArc 2.6.19+.

Top of Page