361296 - If LDAPuidattribute and LDAPmailattribute settings yield different things in the directory, userprefs.cgi?tab=account is unable to accept changes

Status: NEW

(Bugzilla :: User Accounts, defect)

Description

[Marc Schumann [:Wurblzap]]

The tab=account part of userprefs.cgi stores user.login in a hidden HTML input field so that it can check the old password easily (using Bugzilla's log in code). Now if in the directory whatever LDAPuidattribute is set to yields, say, "username", and whatever LDAPmailattribute is set to yields, say, "[e-mail]", the userprefs.cgi-enforced login fails, resulting in
the user not being able to change the Bugzilla real name (for example in order
to remove an absence hint).

Comment 1

[Max Kanat-Alexander]

Yeah, the solution for this is that the LDAP Verify module should be storing the real login name in extern_id, so that we can access it back out later.

Comment 2

[Frédéric Buclin]

The Bugzilla 3.0 branch is now locked to security bugs and dataloss fixes only. This bug doesn't fit into one of these two categories and is retargetted to 3.2 as part of a mass-change. To catch bugmails related to this mass-change, use lts081207 in your email client filter.

Comment 3

[Frédéric Buclin]

Bugzilla 3.2 is restricted to security bugs only. Moreover, this bug is either assigned to nobody or got no traction for several months now. Rather than retargetting it at each new release, I'm clearing the target milestone and the bug will be retargetted to some sensible release when someone starts fixing this bug for real (Bugzilla 3.8 more likely).