i found two little errors in the code of
class.AuthenticationManager.php in the funtions used
to autentificate against LDAP:
- line 228 typing error: original code states:
LDAPBindUserName (with the N of Name in upper case)
but the variables correct name is LDAPBindUsername.
this little error causes that timesheet connects
anonymoully to ldap and in case of microsoft AD is
not allowed to query usernames, etc..
- at line 204 the code "require
("database_credentials.inc");" is missing which
causes ldap-passwords are stored in clear-text in the
database (because the variable
$DATABASE_PASSWORD_FUNCTION is not loadet at the
beginning of the function...)
thanx for codeing this tool!!!!
mike