Re: [tpop3d-discuss] Auth-Ldap BUG

[Simon Loader]

Yep works fine thanks ...

I think its really a problem with ldap but I will take
that up else where and when Ive read up a bit more.

--
Simon Loader



> Try this:
>
> Index: authswitch.c
> ===================================================================
> RCS file: /home/chris/vcvs/repos/tpop3d/authswitch.c,v
> retrieving revision 1.35
> diff -u -r1.35 authswitch.c
> --- authswitch.c        1 Jul 2002 13:16:40 -0000       1.35
> +++ authswitch.c        6 Sep 2002 12:07:26 -0000
> @@ -256,6 +256,13 @@
>      char *x = NULL;
>      const char *l = NULL, *d = NULL;
>
> +    /* This is here mainly for users who forgot to switch off LDAP anonymous
> +     * authentication.... */
> +    if (*pass == 0 && !config_get_bool("permit-empty-password")) {
> +        log_print(LOG_WARNING, _("authcontext_new_user_pass: rejecting 
> login attempt by `%s' with empty password"), user);
> +        return NULL;
> +    }
> +
>      l = local_part;
>      d = domain;
>
> Index: cfgdirectives.c
> ===================================================================
> RCS file: /home/chris/vcvs/repos/tpop3d/cfgdirectives.c,v
> retrieving revision 1.18
> diff -u -r1.18 cfgdirectives.c
> --- cfgdirectives.c     1 Jul 2002 14:06:05 -0000       1.18
> +++ cfgdirectives.c     6 Sep 2002 12:07:26 -0000
> @@ -30,6 +30,7 @@
>      "apop-only",
>      "mailbox",
>      "no-detach",
> +    "permit-empty-passwords",
>
>  #ifdef AUTH_PAM
>      /* auth-pam options */
>
>
> -- now in CVS.
>
> --
> War is Peace   Freedom is Slavery   Ignorance is Strength
> (1984)