[Phpgroupware-tracker] [bug #3734] login into phpgw from sitemgr with long username does not work

[nobody]

=================== BUG #3734: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=3734&group_id=509

Changes by: Marco Gaiarin <address@hidden>
Date: Mon 11/24/2003 at 16:45 (GMT)

------------------ Additional Follow-up Comments ----------------------------
I've not noted before, but the same bug appear also on a different site, that 
use LDAP for user account and autentication (a clean LDAP setup).



Again, if some user log in from sitemgr, email does not work because the email 
app try to login into the IMAP server with all the LDAP OI and not only with 
username.



The good news is that this installation is public accessible from the internet, 
i can create account and so we can setup a testbase, if you want.





=================== BUG #3734: FULL BUG SNAPSHOT ===================


Submitted by: gaio                    Project: phpGroupWare                 
Submitted on: Fri 05/23/2003 at 09:52
Category:  sitemgr                    Bug Group:  0.9.14.003 release        
Severity:  5 - Major                  Priority:  None                       
Resolution:  None                     Assigned to:  totschnig               
Status:  Open                         Component Version:  None              
Platform Version:  None               Reproducibility:  Every Time          

Summary:  login into phpgw from sitemgr with long username does not work

Original Submission:  It's a strange thing, but i can full reproduce this bug 
on my phpgw installation (debian woody, phpgw cvs updated).



A user with long username (defabritiis) can login in phpgw from sitemgr with 
the login box, but cannot use the email (imap complain bad user/pass).

The same user can login into phpgw via phpgw login page, and are able to use 
the mail app with no problem at all.



My user (gaio) can login succesfully both via sitemgr and directly.



Follow-up Comments
*******************

-------------------------------------------------------
Date: Mon 11/24/2003 at 16:45       By: gaio
I've not noted before, but the same bug appear also on a different site, that 
use LDAP for user account and autentication (a clean LDAP setup).



Again, if some user log in from sitemgr, email does not work because the email 
app try to login into the IMAP server with all the LDAP OI and not only with 
username.



The good news is that this installation is public accessible from the internet, 
i can create account and so we can setup a testbase, if you want.



-------------------------------------------------------
Date: Wed 11/05/2003 at 11:29       By: gaio
I'm not a PHP expert, but also i found strange this bug.



Yes you are right, the ldap string came from pam, because i'm moving from an 
NT4 server (and domain) to an LDAP/samba3 network, so for now i've the user 
database in LDAP but not the password.

To authenticate, i've configured the imap daemon to use pam_smb module, and i'm 
using MAIL as authentication method.



With this setup this log mean that:



1) user walter login within sitemgr, that trigger a connect/disconnect to the 
imap server, and all went well.



2) user walter try to access the webmail, and the email app try a login with 
user "uid=walter,ou=People,dc=pp,dc=lnf,dc=it", clearly not valid.



if user walter do the login in main phpgw login page, all went well, so:



1) user walter login, so there's a connect/disconnet to the imap server only 
for authentication purpose



2) user walter use the webmail, and the email app login to the imap server with 
corred user walter.





I know that this is strange, but... the bug remain, and is fully 
repruducible... ;(((



-------------------------------------------------------
Date: Tue 11/04/2003 at 15:31       By: cw
I don't understand what sitemgr login has do with this, it calls the same 
methods as the normal login right?  I would think that it has to.  The ldap 
string is from pam_ldap, nothing to do with phpgw.  The only thing I can think 
of is that sitemgr is not using the same methods as the login page (wrongly so) 
and is not saving the password for using by the email app.

-------------------------------------------------------
Date: Mon 11/03/2003 at 20:18       By: None
I am very sorry that I am of no help in this bug:

Firstly, I am no longer maintaining sitemgr, since my current situation does 
not leave me time for it.

But I'd given it a try, if I had any clue. But I think this bug must be handled 
by someone familiar with how phpgroupware handles LDAP.

Michael Totschnig

-------------------------------------------------------
Date: Thu 10/30/2003 at 16:09       By: gaio
Ok, now i've more info, more bad news.



I'm experiencing now and then that some user (with any browser, this is not a 
browser-related problem) cannot use email if they have login within sitemgr 
login box.



>From zero: with some user (not my user gaio) if i login within sitemgr login 
>box, i can use all the phpgw application without  problems, but i cannot use 
>the mail (email) application.

Note that i'm using LDAP to store account but IMAP to authenticate user.



I've looked at the imap log on server and i've found that when i login to phpgw:



Oct 30 17:02:20 gandalf imapd[27314]: connect from 10.27.1.4

Oct 30 17:02:20 gandalf imapd[27314]: imap service init from 10.27.1.4

Oct 30 17:02:20 gandalf imapd[27314]: Authenticated user=walter 
host=gandalf.pp.lnf.it [10.27.1.4]

Oct 30 17:02:20 gandalf imapd[27314]: Logout user=walter host=gandalf.pp.lnf.it 
[10.27.1.4]



all went well, but when i try to access the email app:



Oct 30 17:02:26 gandalf imapd[27317]: connect from 10.27.1.4

Oct 30 17:02:26 gandalf imapd[27317]: imap service init from 10.27.1.4

Oct 30 17:02:29 gandalf imapd[27317]: pam_ldap: error trying to bind as user 
"uid=walter,ou=People,dc=pp,dc=lnf,dc=it" (Invalid credentials)



note that the entire LDAP entry are passed as user to the imap server, that 
clearly know nothing about the user "uid=walter,ou=People,dc=pp,dc=lnf,dc=it".



If i logout, and then login back with the main phpgw login page, i can access 
email with no problem at all.



If i can help, say me, but please fix this nasty bug! ;)



-------------------------------------------------------
Date: Thu 06/12/2003 at 09:28       By: gaio
Sorry for the big late, i was very busy... i've a bad news. I've tried a 
different browser (mozilla under linux) and a different (long) user (aangarano) 
and there's the same thing.



If i log in within the login box of sitemgr, all seems works well apart mail 
app that pops up an IMAP authentication error; if i logout and login back 
within the main phpgw login page all went well.



Yes, i'm using cookies and php4 sessions.



-------------------------------------------------------
Date: Fri 05/30/2003 at 05:26       By: totschnig
I am not sure how to debug this, since I do not use phpgw's email. Did you 
doublecheck with a different long username if the same problem arises? Do you 
have different installations of phpgroupware on the same machine?

-------------------------------------------------------
Date: Thu 05/29/2003 at 00:36       By: skwashd
Weird.  I have looked at the 14 code for sitemgr login, it just posts phpgw 
login.  Are you using cookies? what type of sessions are you using? php4 or db?


CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=3734&group_id=509

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/