Last modified: 2013-12-18 15:26:09 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T60641, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 58641 - Invalid values in "getCanonicalName"
Invalid values in "getCanonicalName"
Status: UNCONFIRMED
Product: MediaWiki extensions
Classification: Unclassified
LdapAuthentication (Other open bugs)
master
All Linux
: Unprioritized normal (vote)
: ---
Assigned To: Ryan Lane
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-12-18 12:36 UTC by patrick.holz
Modified: 2013-12-18 15:26 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description patrick.holz 2013-12-18 12:36:46 UTC
Hi,

I'm using the current version of LdapAuthentication in Mediawiki 1.19.9 LTS. The following problem occured when I tried to block an old user (which had been created in Mediawiki before we used the extension): Mediawiki asked me if I really want to block myself. I checked other blocked users and it turned out that instead of the expired users some other, currently active users could not log in. 

So I went on doing some debugging in the php code and I found out that the problem has its origin in "functions/User.php", more precisely in the function "newFromName":

$name = $wgAuth->getCanonicalName( $t->getText() );

So there the LDAP server is asked for the canonical name of the user and it seems that it returns incorrect values in a way that confuses mediawiki extremely. Suddenly a complete different user is used as the "target" of the operation. 

I change the line mentioned above to:

$name = $t->getText();

...and now it works for me. I think that the plugin should check for invalid values coming as result of "getCanonicalName" from the LDAP server and use the unchecked version "$t->getText();" instead.

Kind regards, 
Patrick Holz
Comment 1 Ryan Lane 2013-12-18 15:25:37 UTC
What version of LdapAuth are you using? Master?
Comment 2 patrick.holz 2013-12-18 15:26:09 UTC
Yes, I'm using the Master version

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links