Project

General

Profile

Bug #5244

ldapweb.cgi shouldn't report ou=Account accounts since they're unusable

Added by Shaun Walbridge almost 9 years ago. Updated almost 8 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
registry
Target version:
Start date:
11/16/2010
Due date:
% Done:

0%

Estimated time:
Bugzilla-Id:
5244

Description

Because of security considerations, we can't allow users to reuse their credentials from ou=Account, which is where we create the majority of accounts for Plone and SVN. However, when trying to show users other accounts which are the same, we show these accounts, confusing new users.

As a temporary fix, filter out the ou=Account from accounts when making suggestions.

History

#1 Updated by Shaun Walbridge almost 9 years ago

A quick fix in 5650 for this issue, just filtering based on strings. Need to test this, but the development environment is currently broken, will chat to the maintenance tzars to get this working again so we can fix & close this one.

#2 Updated by Matt Jones almost 8 years ago

Need to check with Shaun if this is actually fixed.

#3 Updated by ben leinfelder almost 8 years ago

Used Jing's test server to verify that ou=Account entries were not shown.
http://chico1.dyndns.org/knb/cgi-bin/ldapweb.cgi?cfg=nceas

#4 Updated by Redmine Admin over 6 years ago

Original Bugzilla ID was 5244

Also available in: Atom PDF