[tpop3d-discuss] Auth-Ldap BUG

[Simon Loader]

Yep works fine thanks ...

I think its really a problem with ldap but I will take
that up else where and when Ive read up a bit more.

-- 
Simon Loader



>Try this:
>
>Index: authswitch.c
>===================================================================
>RCS file: /home/chris/vcvs/repos/tpop3d/authswitch.c,v
>retrieving revision 1.35
>diff -u -r1.35 authswitch.c
>--- authswitch.c        1 Jul 2002 13:16:40 -0000       1.35
>+++ authswitch.c        6 Sep 2002 12:07:26 -0000
>@@ -256,6 +256,13 @@
>      char *x = NULL;
>      const char *l = NULL, *d = NULL;
>
>+    /* This is here mainly for users who forgot to switch off LDAP anonymous
>+     * authentication.... */
>+    if (*pass == 0 && !config_get_bool("permit-empty-password")) {
>+        log_print(LOG_WARNING, _("authcontext_new_user_pass: rejecting 
>login attempt by `%s' with empty password"), user);
>+        return NULL;
>+    }
>+
>      l = local_part;
>      d = domain;
>
>Index: cfgdirectives.c
>===================================================================
>RCS file: /home/chris/vcvs/repos/tpop3d/cfgdirectives.c,v
>retrieving revision 1.18
>diff -u -r1.18 cfgdirectives.c
>--- cfgdirectives.c     1 Jul 2002 14:06:05 -0000       1.18
>+++ cfgdirectives.c     6 Sep 2002 12:07:26 -0000
>@@ -30,6 +30,7 @@
>      "apop-only",
>      "mailbox",
>      "no-detach",
>+    "permit-empty-passwords",
>
>  #ifdef AUTH_PAM
>      /* auth-pam options */
>
>
>-- now in CVS.
>
>--
>War is Peace   Freedom is Slavery   Ignorance is Strength
>(1984)