Password change allowed by default despite code and comments says the opposite!

[Guillaume_LACHENAL]

• Environment :

eGroupWare-1.4.004-2
auth type : LDAP
accounts store : SQL
Auto create account records for authenticated users

<quote setup/inc/class.setup.inc.php>
902 * @param boolean $changepw user has right
to change pw, default False = Pw change NOT allowed
903 * @param string $email
904 * @return int the numerical user-id
905 */
906 function add_account($username,$first,$last,
$passwd,$primary_group=‘Default’,$changepw=True,$email=’’)
[/quote]

• Case :

After authentication over LDAP, user accounts, which doesn’t exists
at first time, are created by eGroupware and stored in SQL database.
All autocreated users have right to change their password.
We expected (and want) this is disallowed by default.

Please CC me in your replies as I’m not on -devel list

Thanks in advance.

Regards,

-Guillaume-

---

This SF.Net email is sponsored by the Moblin Your Move Developer’s challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

---

eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers

[Ralf_Becker_6]

Hi Guillaume,

Guillaume LACHENAL schrieb:

• Environment :

eGroupWare-1.4.004-2
auth type : LDAP
accounts store : SQL
Auto create account records for authenticated users

<quote setup/inc/class.setup.inc.php>
902 * @param boolean $changepw user has right
to change pw, default False = Pw change NOT allowed
903 * @param string $email
904 * @return int the numerical user-id
905 */
906 function add_account($username,$first,$last,
$passwd,$primary_group=‘Default’,$changepw=True,$email=’’)
[/quote]

The different default in the docu/comment of that parameter does not
mean it’s done wrong currently. In all other cases of autocreated
accounts (auth_type != ldap), there’s no password change anyway (because
we have no idea how to change the password in that cases).

We could create a configuration for that, or you just modify it in your
code.

Ralf

• Case :

After authentication over LDAP, user accounts, which doesn’t exists
at first time, are created by eGroupware and stored in SQL database.
All autocreated users have right to change their password.
We expected (and want) this is disallowed by default.

Please CC me in your replies as I’m not on -devel list

Thanks in advance.

Regards,

-Guillaume-

---

This SF.Net email is sponsored by the Moblin Your Move Developer’s challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

---

eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers

–
Ralf Becker
eGroupWare Training & Support ==> http://www.egroupware-support.de
Outdoor Unlimited Training GmbH [www.outdoor-training.de]
Handelsregister HRB Kaiserslautern 3587
Geschäftsführer Birgit und Ralf Becker
Leibnizstr. 17, 67663 Kaiserslautern, Germany
Telefon +49 (0)631 31657-0

---

This SF.Net email is sponsored by the Moblin Your Move Developer’s challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/

---

eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers