Re[3]: [SOGo] Exception in processing of unicode strings

Dmitri Ivanov sogo@opengroupware.org
Wed, 21 Nov 2007 21:11:47 +0300


Hello Wolfgang,

WS> Anyway I will have a step-by-step look at the identification
WS> process. SOPE is full of calls to getCString which lacks in
WS> correctness when all your encodings are not the same between your
WS> web application and your server environment. Also, certain
WS> implementation in GNUstep used to be buggy.

I think, that is not a failure in auth module. Why?
I presume it works in a standard way:
1.ldap_search filter=(samAccountName=<passed uid>) attr=DN
2.ldap_bind <dn, passed cleartext_passwd>
3.if (ldap_error == LDAP_SUCCESS) then authentication successful.

On step 2, DN _may_ contain cyrillic characters inside it. I've tested
this, placing a test user account into a cyrillic named org. unit.
No error in that case.

But afterwards, CN of that user is further processed. And here we get
an exception when CN contains any cyrillic characters.

-- 
Best regards,
 Dmitri                            mailto:ivanov_dv@mediasign.ru