Re: [SM-PLUGINS] Problems with change_ldappass

[Tomas K. <to...@us...>]

>> dpu...@uc... wrote:
>>
>>> I'm having problems with the "change_ldappass" plugin.
>>>
>>>
>>>
>> you need php-ldap. Do you have it? kfx
>
> Yes, I've instaled it. The rest of squirrelmail works just fine, the only
>  problem I have is with the change_ldappass plugin.
>
>
> I've found that there are two files named load_prefs.php and
> validate.php, just the files that I need, but they are in
> squirrelmail/include, not in squirrelmail/src.
>
> If I link these files in include to src, then squirrel doesn't give me a
> blank screen when I try to change the password, but instead it presents me
>  the form to introduce the new password, but when I try to make the
> change it fails with and gives this message: LDAP BIND FAILED

OpenLDAP by default does not allow v2 binding protocol since some openldap
2.1 version. I don't remember exact version number. PHP LDAP extension
uses v2 binding by default. change_ldappass v.1.8 plugin does not contain
code that turns on v3 binding protocol. See change_ldappass updates at
http://sourceforge.net/tracker/index.php?func=detail&aid=1255733&group_id=311&atid=300311
or check change_password plugin from SquirrelMail 1.5.1 or allow v2
binding in slapd.conf.

If error is not caused by bind protocol restrictions, check your slapd
ACLs and change_ldappass plugin configuration. There are two different
authentication modes. One works with unprivileged user accounts, but
plugin must be able to locate user's DN and user must be able to change
own password. Other authentication method requires administrative password
in plugin configuration.

-- 
Tomas