2769 - [LDAP] Auth with bogus credentials does not bind anonymously

Status: RESOLVED INVALID

(MailNews Core :: LDAP Integration, defect, P5)

Description

[ppandit]

(This bug imported from BugSplat, Netscape's internal bugsystem.  It
was known there as bug #332743
http://scopus.netscape.com/bugsplat/show_bug.cgi?id=332743
Imported into Bugzilla on 01/28/99 17:35)

This bug originally noticed while testing 325301. This bug needs to be fixed
before 325301 can be verified. The step are as follows.

1. Launch Nova, and add an LDAP server that you can authenticate to, like the
Netscape phone book
2. Check "use name and password" but leave "save password" clear.
3. Run a search, and give a bogus email address or password.
4. Notice that you get an error message, and then it runs your search anyway
(because our server allows anonymous binds)

The result is that
no search occurs (did not do the anonymous bind)

Don't know if this is a Communicator or Server bug so initially sent to Phil and
he can reassign to the appropriate developer.

Par

Comment 1

[lchiang]

Update: when this bug is fixed, try the steps outlined by Phil in bug 325301.

Comment 2

[Phil Peterson]

As I think about this, I'm not sure if we really want to bind anonymously. How
about this: we stay in the authentication loop until there's either a successful
authentication, or the user hits cancel, and then we can bind anonymously.

TFV 5.0

Comment 3

[lchiang]

I (or someone else) will be moving enhancements, etc, bugs targeted for 5.0 to
bugzilla in the near future.

Comment 4

[leger]

Setting all current Open/Normal to M4.

Comment 5

[Phil Peterson]

Marking assigned for 5.0

Comment 6

[Phil Peterson]

M7

Comment 7

[Phil Peterson]

Reassign to [e-mail]

Comment 8

[Phil Peterson]

I think I own this now, but LDAP is pushed out past B1

Comment 9

[leger]

Moving all Mail/News Networking bugs to Mail/News Networking-Mail

This may re-open previously Verified bugs due to a Bugzilla bug...if so, I will
fix those bugs.

Comment 10

[sol]

As Phil mentions, this bug does not need to be fixed until after Beta 1

Comment 11

[selmer (gone)]

Phil found a way to weasel out of owning this bug.  Reassigning.

Comment 12

[selmer (gone)]

Mass moving to M16 to get these off the M15 radar.  Please let me know if this
is really an M15 stopper.

Comment 13

[selmer (gone)]

[LDAP] in summary for all ldap bugs

Comment 14

[selmer (gone)]

LDAP bugs to M30 & [e-mail] & helpwanted

Comment 15

[Henrik Gemal]

just moving

Comment 16

[Thomas]

has anything happened on this since then? (bug cleaning)

Comment 17

[Wayne Mery (:wsmwk)]

ldap was rewritten