Date: Tue, 17 Oct 2006 19:16:45 +0200 (CEST) From: Danijel Tasov <danielt@pilgerer.org> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/104502: mail/mailscanner binds to base dn Message-ID: <200610171716.k9HHGjpG054253@hamlet.pilgerer.org> Resent-Message-ID: <200610171720.k9HHKETj095574@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 104502
>Category: ports
>Synopsis: mail/mailscanner binds to base dn
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Tue Oct 17 17:20:13 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: Danijel Tasov
>Release: FreeBSD 6.2-PRERELEASE i386
>Organization:
Pilgerer.Org
>Environment:
System: FreeBSD malvolio.pilgerer.org 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #1: Mon Oct 2 19:16:34 CEST 2006 benny@trial.pilgerer.de:/usr/obj/export/usr/src/sys/TRIAL i386
>Description:
MailScanner should connect anonymously as described in the config file:
>From MailScanner.conf:
# If you are using an LDAP server to read the configuration, these
# are the details required for the LDAP connection. The connection
# is anonymous.
LDAP Server = somehost.pilgerer.de
LDAP Base = o=pilgerer,c=de
LDAP Site = PilgererMTA
When MailSanner is started the following error occurs:
unauthenticated bind (DN with no password) disallowed at /usr/local/lib/MailScanner/MailScanner/Config.pm line 668
Well, this is because MailScanner binds to the "LDAP Base":
$binding = $connection->bind($ldapbase, anonymous=>1);
which doesn't make much sense. So a simple anonymous bind should be used:
$binding = $connection->bind();
>How-To-Repeat:
Configure MailScanner for use with LDAP and start it.
>Fix:
--- lib/MailScanner/Config.pm.orig Tue Oct 17 18:31:40 2006
+++ lib/MailScanner/Config.pm Tue Oct 17 18:31:54 2006
@@ -665,7 +665,7 @@
# Connect and bind
$connection = Net::LDAP->new($ldapserver, onerror=>'warn') or
print STDERR "Making LDAP connection error: $@\n";
- $binding = $connection->bind($ldapbase, anonymous=>1);
+ $binding = $connection->bind();
$binding->code and
print STDERR "LDAP binding error: $@\n";
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200610171716.k9HHGjpG054253>