FS#1262 Problem with LDAP auth and CRYPT-MD5 passwords

ACL & Authentication

• 

  2007-09-30 xkill

  There is a problem with the LDAP authentication.
  When the passwords in the LDAP are stored using CRYPT-MD5 the dokuwiki authentication works, but doesn't mantain the session so you are logged out when open another page of the dokiwiki.
  
  We try this using a demo user like:
  dn: uid=xkill,ou=people,ou=ciberhell.ath.cx,ou=domains,dc=locolandia,dc=net
  objectClass: inetOrgPerson
  objectClass: top
  objectClass: person
  objectClass: CourierMailAccount
  uid: xkill
  cn: xkill
  sn: Pablo Catalina
  gidNumber: 20000
  quota: 0
  homeDirectory: /home/xkill
  uidNumber: 1
  mailbox: xkill@ciberhell.ath.cx/
  defaultdelivery: /var/mail/virtual
  mail: xkill@ciberhell.ath.cx
  userPassword:: {CRYPT-MD5}something
  
  and the dokuwiki loggin is ok, but I can't go to other page on the dokuwiki because the dokuwiki doesn't mantain the session, later we change the password using {CRYPT}something and it works fine.
  
  So there is a problem with the password cipher and the dokuwiki authentication.
• 

  2008-02-23 andi

  DokuWiki does not care for the used password mechanism used in the LDAP server. All it does is trying to bind with the given credentials. The problem you're experience is most probably located somewhere outside of DokuWiki.