ticket	summary	type	release	owner	status	created	modified	_description	_reporter
6878	Get Full Name an Email from LDAP	task	0.11	Larry Ruiz	new	2010-03-25T11:27:34+01:00	2010-03-29T18:31:47+02:00	Is it possible to obtain the full name and the email address of users from ldap into trac?	christof@…
9172	[Patch] Change password	enhancement	0.11	Larry Ruiz	new	2011-09-12T02:14:11+02:00	2012-03-02T09:55:16+01:00	"Hi lruiz,

I've come across your plugin while looking for LDAP support in Trac and the AccountManagerPlugin.

I haven't looked around to see if other solutions are more actively maintained, but I needed LDAP authentication with support for a password change.
With the recent changes in the AccountManagerPlugin (old_password), the set_password method can be implemented (although with very basic functionality).

See attached patch file.


Kind regards,

Jonathan van Alteren"	jvalteren@…
11412	Allow connexion without user_searchbase	enhancement		Larry Ruiz	new	2013-11-26T18:08:16+01:00	2013-11-26T18:08:16+01:00	"My Novell LDAP server doesn't keep user list into an 'ou', so I had to leave user_searchbase, but then the LDAP searchbase is invalide because it starts with a comma (,).

Here's a proposed patch (my knowledge of Python are quite basic) :

LINE 13 : The default user_searchbase is now empty
{{{
user_searchbase = Option('ldap', 'user_searchbase', '')
}}}

LINE 24 : Strip separators (comma) at string start and end 
{{{
base = (self.user_searchbase + ',' + self.root_dn).strip(',')
}}}

"	anonymous
11441	TLS already started	defect	1.0	Larry Ruiz	new	2013-12-16T18:14:03+01:00	2013-12-16T18:14:03+01:00	"Hi,

I was getting the following error when trying to securely connect to an LDAP server:

{{{
OPERATIONS_ERROR: {'info': 'TLS already started', 'desc': 'Operations error'}
}}}

I am very new to Trac admin and not much of a python programmer, but the following fix corrected this issue for me:

Commenting out the if statement at: http://trac-hacks.org/browser/ldapauthnzplugin/trunk/tautua/trac_plugins/security/ldapauth.py#L72

{{{
'''
   if self.server.startswith('ldaps'):
	connection.start_tls_s()
'''
}}}


My very naive understanding is it seems that by specifying a secure server in the trac.ini file:
{{{
[ldap]
#use ldaps:// for tls
server = ldaps://...
...
}}}
the ldap.initialize() function at http://trac-hacks.org/browser/ldapauthnzplugin/trunk/tautua/trac_plugins/security/ldapauth.py#L70 already starts TLS.


Regards,

Patrick

"	patrick