Menu ▾ ▴

#48 typing error in "class.AuthenticationManager.php"

open
nobody
None
5
2012-09-14
2006-03-29
mike
No

i found two little errors in the code of
class.AuthenticationManager.php in the funtions used
to autentificate against LDAP:

  1. line 228 typing error: original code states:
    LDAPBindUserName (with the N of Name in upper case)
    but the variables correct name is LDAPBindUsername.
    this little error causes that timesheet connects
    anonymoully to ldap and in case of microsoft AD is
    not allowed to query usernames, etc..
  2. at line 204 the code "require
    ("database_credentials.inc");" is missing which
    causes ldap-passwords are stored in clear-text in the
    database (because the variable
    $DATABASE_PASSWORD_FUNCTION is not loadet at the
    beginning of the function...)

thanx for codeing this tool!!!!
mike

Discussion


Log in to post a comment.