develooper Front page | perl.ldap | Postings from April 2008

Critical Bug in Net::LDAP v0.35

Thread Next
From:
Mike Peachey
Date:
April 11, 2008 08:03
Subject:
Critical Bug in Net::LDAP v0.35
I have discovered a critical bug in Net::LDAP 0.35 and submitted the
following ticket:
http://rt.cpan.org/Ticket/Display.html?id=34878

In 0.35, the Net::Ldap::Util::ldap_error_name subroutine is broken which
means that all functions such as Net::LDAP->code() that return a message
as a constant are broken.

Instead of returning the correct message, Password Policy (PP) constants
are being returned instead.

The most crucial example is that a successful bind or search is
returning LDAP_PP_PASSWORD_EXPIRED (0) instead of LDAP_SUCCESS (0). You
can code around this failure by using resultCode() instead to get the
integer form of the result code, however all current perl modules that
determine results by using the constant names will function unexpectedly.

Please advise me *quickly* if you think for any reason that I have the 
wrong end of the stick here, but having passed it by a few colleagues 
I'm pretty damn sure this is a bug and a critical one.
-- 
Kind Regards,

__________________________________________________

Mike Peachey, IT
Tel: +44 114 281 2655
Fax: +44 114 281 2951
Jennic Ltd, Furnival Street, Sheffield, S1 4QT, UK
Comp Reg No: 3191371 - Registered In England
http://www.jennic.com
__________________________________________________


Thread Next


Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About